GitHub can now block and alert you of pull requests that introduce new dependencies impacted by known supply chain vulnerabilities. [...]  ( 3 min )

The Mirai malware is now leveraging the Spring4Shell exploit to infect vulnerable web servers and recruit them for DDoS (distributed denial of service) attacks. [...]  ( 4 min )

Today, the U.S. has announced exemptions on previously imposed sanctions on Russia related to telecommunications and internet-based communications, likely to prevent Russians from being isolated from Western news sources. [...]  ( 4 min )

An update to Raspberry Pi OS Bullseye has removed the default 'pi' user to make it harder for attackers to find and compromise Internet-exposed Raspberry Pi devices using default credentials. [...]  ( 4 min )

Microsoft has successfully disrupted attacks against Ukrainian targets coordinated by the Russian APT28 hacking group after taking down seven domains used as attack infrastructure. [...]  ( 3 min )

China-linked adversaries have been attributed to an ongoing onslaught against Indian power grid organizations, one year after a concerted campaign targeting critical infrastructure in the country came to light. Most of the intrusions involved a modular backdoor named ShadowPad, according to Recorded Future's Insikt Group, a sophisticated remote access trojan which has been dubbed a "masterpiece  ( 4 min )

Cybersecurity researchers have uncovered further links between BlackCat (aka AlphaV) and BlackMatter ransomware families, the former of which emerged as a replacement following international scrutiny last year. "At least some members of the new BlackCat group have links to the BlackMatter group, because they modified and reused a custom exfiltration tool [...] and which has only been observed in  ( 3 min )

A 32-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for the individual's criminal work as a "high-level hacker" in the financially motivated group FIN7. Denys Iarmak, who worked as a penetration tester for the cartel from November 2016 through November 2018, had been previously arrested in Bangkok, Thailand in November 2019, before being extradited to the U.S.  ( 3 min )

Microsoft on Thursday disclosed that it obtained a court order to take control of seven domains used by APT28, a state-sponsored group operated by Russia's military intelligence service, with the goal of neutralizing its attacks on Ukraine. "We have since re-directed these domains to a sinkhole controlled by Microsoft, enabling us to mitigate Strontium's current use of these domains and enable  ( 4 min )

A number of rogue Android apps that have been cumulatively installed from the official Google Play Store more than 50,000 times are being used to target banks and other financial entities. The rental banking trojan, dubbed Octo, is said to be a rebrand of another Android malware called ExobotCompact, which, in turn, is a "lite" replacement for its Exobot predecessor, Dutch mobile security firm  ( 4 min )

Special method for production gets cash injection from govt, vendors New techniques for producing lithium could play a vital part in making batteries for applications ranging from smartphones to electric vehicles that are more environmentally friendly than current methods of extraction.…  ( 8 min )

Some fear they'll lose workstation sales to Lenovo, AMD's exclusive launch partner for the T Pro 5000 If you've been on the hunt for a pre-built workstation with AMD's Ryzen Threadripper processors, there's a chance you've noticed fewer options available and longer lead times from different PC system builders.…  ( 11 min )

12 years on, rebates-for-not-using-AMD-chips case isn't over yet... The European Commission (EC) is going ahead with an appeal against a court decision earlier this year to drop a $1.2 billion fine imposed against Intel for anti-competitive behavior.…  ( 8 min )

Default user gone, Bluetooth pairing during setup, and latest LTS Linux kernel An update to the Debian Bullseye-based Raspberry Pi OS is being rolled out with both quality-of-life improvements and one very important tweak: an overdue departure of the default user.…  ( 8 min )

Remember warning about hurried release to meet Brexit deadline? Never forget Updated  A system vital to the flow of goods across the UK's border has suffered a devastating outage following a rush to implement it in time for the Brexit deadline.…  ( 9 min )

Agency upset YouTube hasn't removed 'fake' videos about activities it won't call 'war' Russia's communications scold is fed up with all the misinformation online, at least with regard to Google and its YouTube subsidiary.…  ( 8 min )

This week's column coming to you via hologram. Or a spaceship Something for the Weekend  How can you tell if a fish is upset? It doesn't grind its pharyngeal teeth, clench its fins or utter moist oaths. And it's not as if you can see tears streaming down its face.…  ( 10 min )

Standard grants access to public hotspots without having to register each time The Wireless Broadband Alliance (WBA) has completed testing to prepare for the deployment of WBA OpenRoaming, a federation service built to give seamless access to Wi-Fi hotspots across Europe's municipal networks.…  ( 8 min )

Google says Topaz will lower latency, even though both nations already have shorter routes to bit barns Google has revealed it will fund a submarine cable connecting Japan and Canada.…  ( 8 min )

CWU wants 10% for members, cites biting inflation rises in UK The Communication Workers Union is lining up an industrial action ballot for members working at BT after rejecting the telecom company's offer of a flat rate £1,500 pay rise for 58,000 frontline workers.…  ( 9 min )

Beijing may have had a hand in attacks in Ukraine, too China has been accused of conducting a long-term cyber attack on India's power grid, and has been implicated in cyber attacks against targets in Ukraine.…  ( 8 min )

Back up your data, it's later than you think On Call  It's a tale from before the times of Bitlocker and TPM in On Call today as a Register reader demonstrates the importance of knowing one's true worth.…  ( 7 min )

'Opaque and difficult' Google Ad rules cost biz 20 hours profit Google has failed in its bid to dismiss a €150 million fine ordered by France's monopoly watchdog in 2019 for exploiting its position in the search advertising market, a court ruled on Thursday.…  ( 7 min )

Office 365 and Windows 365 prices to rise in September – one SKU by much more than recent commercial increase Microsoft has hiked the price of Office 365 and Windows 365 versions it offers to non-profit customers, effective September 1, 2022.…  ( 8 min )

For now, a mere 80 million more citizens can trial the Digital Yuan China's central bank digital currency, the Digital Yuan, has been integrated with Tencent's flagship messaging app WeChat, and appears as a payment option when users employ the super-app shop.…  ( 7 min )

Appoints independent committee and gives angry investors most of what they want Toshiba has decided it will consider proposals to take the company private, and devise yet another strategy to improve its performance, suggesting alternative proposals for the company's future will be revealed – and perhaps decided - in late June.…  ( 7 min )

He's the third gangster in crew to face time behind bars Another member of notorious cybercrime ring FIN7 is headed to jail after the gang breached major companies' networks across the US and stole more than $1 billion from these businesses' customers.…  ( 8 min )

Automated HR in the cross-hairs over discrimination law A newly proposed amendment to California's hiring discrimination laws would make AI-powered employment decision-making software a source of legal liability. …  ( 8 min )

Apple tritt Bedenken über die Bevorzugung eigener iPhone-Apps entgegen. Die Lobby-Ausgaben in Europa hat der Konzern inzwischen offenbar verdoppelt.  ( 4 min )

Unsere Übersicht kleiner, aber interessanter Meldungen enthält diese Woche unter anderem BMC, Mainframe, Eclipse IoT, Cython, Emacs, Laravel, Rome und DataGrip.  ( 4 min )

BigLake soll Googles zentrale Datenplattform werden und Analytik strukturierter sowie unstrukturierter Daten unter ein gemeinsames Dach bringen.  ( 3 min )

Vor sieben Jahren sorgte die FIN7-Gruppe mit dem größten Cyber-Raubzug für Schlagzeilen, danach blieb sie aktiv. Nun wurde ein drittes Mitglied verurteilt.  ( 4 min )

Die Berliner Datenschutzbeauftragte hat den Senat aufgefordert, Facebook-Fanpages abzuschalten. Grundlage ist ein Gutachten der deutschen Datenschutzbehörden.  ( 3 min )

Die Vorabversion des Plug-ins von Couchbase bietet bereits erste Optionen zum Bearbeiten und Löschen von Datenbankinhalten über die Entwicklungsumgebung.  ( 4 min )

Der Compiler bietet eine Anbindung an die sourcebasierte Codeabdeckung von LLVM. Außerdem stolpert die Sprache nicht mehr über scheinbar negative Zeitspannen.  ( 5 min )

Mit wenigen Mitteln und effizienten Maßnahmen lassen sich Social-Media-Auftritte professioneller gestalten. Der Workshop liefert praxisnah das nötige Rüstzeug.  ( 4 min )

In der Ukraine sind in den vergangenen Wochen tausende Starlink-Antennen angekommen und installiert worden. Die US-Regierung organisiert die Lieferungen.  ( 4 min )

Ein halbes Jahrzehnt ist es her, dass Apple seine Strategie bei den Workstations radikal wechselte – spät, aber oho. Resultat sind die superschnellen ARM-Macs.  ( 4 min )

Alle sieben Vorträge der letztjährigen Online-Konferenz betterCode() Go stehen nun auf Vimeo sowohl als Paket als auch einzeln zum Kauf bereit.  ( 3 min )

Auf dem Mac kann nun die Shortcuts-App zur Automatisierung von Pages, Numbers und Keynote verwendet werden. Auch für iOS und iPadOS gibt es eine Aktualisierung.  ( 4 min )

Der im September 2022 startende Hochschulzertifikatskurs über das Datenschutzmanagement qualifiziert Teilnehmende zum Datenschutzbeauftragten.  ( 3 min )

Baden in Niederösterreich hat sich die BadenCard für den Wertstoffhof ausgedacht. Da der politische Druck groß war, baute man hastig eine Website: mit Folgen.  ( 8 min )

Das US-Tech-Unternehmen baut ein regionales Rechenzentrum von Weltklasse in Zentralmexiko. Es soll Kunden weltweit das gesamte Microsoft-Portfolio anbieten.  ( 4 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. How a Zambian morgue is exposing the real covid toll in Africa The morgue at Lusaka’s University Teaching Hospital (UTH), near the center of Zambia’s capital, is not the most pleasant place to…  ( 4 min )

The morgue at Lusaka’s University Teaching Hospital (UTH), a sprawling brick facility near the center of Zambia’s capital, is not the most pleasant place to carry out a clinical study. Inside the cavernous interior, newly arrived bodies linger unattended—on rolling metal tables or on the concrete floor wrapped in blankets. Others lie stacked on open-air…  ( 10 min )

Data is among the most important things that make up a web application or a conventional native app. We need data to be able to see and perhaps understand the purpose of an application. In this article, we’ll look at another approach to obtaining data in an application that requires authentication or authorization using Next.js.  ( 6 min )

Good data is the bedrock of a self-service data consumption model, which in turn unlocks insights, analytics, personalization at scale through AI. Yet many organizations face immense challenges setting up a robust data foundation. Dive into a pragmatic perspective on abstracting the complexity and untangling the conflicts in data management for better AI. About the…  ( 2 min )

While digital accessibility awareness is growing — fueled by the rise of accessibility lawsuits, renewed efforts by the government, and diversity and inclusion initiatives—progress on making the internet more accessible to people with disabilities remains slow. Companies ranging from major health care corporations to small businesses with Shopify storefronts are struggling to make their websites…  ( 5 min )

In many areas of the world, environmental conditions are not conducive to traditional farming. Ensuring food security depends on continuous agricultural innovation, which has been part of the United Arab Emirates’ (UAE) mission since its founding, given the country’s arid conditions and little water. Smart Acres is one of the many companies exploring new sustainable…  ( 14 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Deception, exploited workers, and free cash: How Worldcoin recruited its first half a million test users On a sunny morning last December, Iyus Ruswandi, a 35-year-old furniture maker in the village of Gunungguruh,…  ( 5 min )

Plus: More financially motivated miscreants try to monetize invasion Facebook is fighting a surge in cyber-espionage attempts and misinformation campaigns related to the Russian invasion of Ukraine, according to a new report by parent group Meta.…  ( 8 min )

Equip Amazon rivals with flexible networking chips? Sounds Epyc With cloud service providers like Amazon Web Services increasingly building their own silicon, it's no surprise that large chip companies like Intel and AMD are trying to find new ways not just to remain relevant in the cloud but to become can't-miss vendors for next-generation architectures.…  ( 11 min )

Bundled version of Node.js simplifies executing downloaded code Adobe Creative Cloud Experience, a service installed via the Creative Cloud installer for Windows, includes a Node.js executable that can be abused to infect and compromise a victim's PC.…  ( 8 min )

Want that thing, but in a different color, and don't know the name? Multisearch has your back Google's latest feature is making its Lens visual search tool mingle with text for image searches for those difficult-to-describe vague queries.…  ( 9 min )

Datacenter operator with $2.3b value said to be discussing options a year after SPAC merger Datacenter operator Cyxtera is considering putting itself up for sale, according to reports.…  ( 8 min )

Fintech provider flaw could have hit dozens of U.S. banks, says Salt Security Salt Security spotted a vulnerability in a large fintech company's digital platform that would have granted attackers admin access to banking systems in addition to allowing them to transfer funds to their own accounts.…  ( 10 min )

Pressure on Congress to submit the America COMPETES Act ASAP The Biden administration wants the $52 billion CHIPS Act passed without delay, according to a classified briefing between senior officials and a bipartisan group of Congressional representatives.…  ( 8 min )

Improved defenses give organizations more room to negotiate but won't protect from lawsuits, says law firm An increased willingness on the part of enterprises to invest in cybersecurity may finally be starting to make a difference, according to US law giant BakerHostetler.…  ( 9 min )

Motion calls for repairability ratings and expected lifetime of products European lawmakers are voting in plenary on a Right to Repair resolution today amid calls for the initiative to go even further.…  ( 8 min )

Even notoriously tech averse stock market gambler can't resist piece of pandemic-boosted PC extravaganza Warren Buffett's Berkshire Hathaway has taken up a double-digit stake in PC and print biz HP Inc's stock worth about $4.2 billion, a move that sent the company's share price up by 10 percent.…  ( 8 min )

30-year-old software that first introduced Windows Registry and killed Real Mode Time flies whether you're having fun or simply trying to work out which Registry change left your system hopelessly borked, and before you know it, Windows 3.1 is turning 30.…  ( 8 min )

Semiconductor Alliance wants US R&D billions to be dished out fairly, broadly, objectively A newly formed group is calling for the US to ensure efforts and public funding to boost the nation's domestic semiconductor industry benefits a broad family of stakeholders, not just a few companies.…  ( 9 min )

No actual users harmed yet as dept tests safety of pushing water, telecoms services in single pipeline Parts of South Yorkshire are to get fiber broadband run through mains water pipes in a two-year trial to evaluate the viability of the technology for connecting more homes.…  ( 8 min )

Cicada's months-long global espionage campaign marks an expansion of team's capabilities A China-backed crew is said to be running a global espionage campaign against governments, religious groups, and non-governmental organizations (NGOs) by, in some cases, possibly exploiting a vulnerability in Microsoft Exchange servers.…  ( 9 min )

Optional update should apply to all users, says Vivaldi boss Microsoft's one-click default browser change under Windows 11 is being met with raised eyebrows from its browser rivals.…  ( 8 min )

Company cites data security and privacy as reasons for cleaning house Outdated apps will no longer be accessible on Androids that are either new or updated to the latest software starting November 1, thanks to a Google policy that was announced Wednesday.…  ( 7 min )

From serverless to server, yes! Cado Security says it has discovered a strain of malware specifically designed to run in AWS Lambda serverless environments and mine cryptocurrency.…  ( 11 min )

VIPER mission also bitten by tech supply chain woes Progress on NASA's Volatiles Investigating Polar Exploration Rover (VIPER) mission to search for useful chemicals at the Moon's South Pole has been delayed by two tech-related issues springing from the COVID-19 pandemic.…  ( 8 min )

It paints, it edits, it potentially misleads people with faked pictures OpenAI has provided its latest caption-to-image-generation model, dubbed DALL·E 2, to select users to test before it potentially opens up the technology for wider use. …  ( 8 min )

Meanwhile changes the name of its major customer-facing event – probably a coincidence VMware has revealed more critical bugs that impact five of its products, including the Cloud Foundation bundle it advances as the ideal way to build a hybrid multi-cloud.…  ( 9 min )

Foreign nationals who earn STEM PhDs stateside mostly stick around Most foreign nationals who earn STEM PhDs in the United States remain in the country many years after graduating, with the highest numbers among Chinese and Indian graduates, according to a report released this week from American policy think tank, the Center for Security and Emerging Technology (CSET).…  ( 8 min )

3D Investment Partners wants to sell, labels company a 'governance embarrassment for Japan' One of Toshiba’s largest shareholders has called upon the company's board to solicit bids to acquire all or part of the ailing Japanese giant.…  ( 8 min )

Inventors, assemble! India's attempts to turn itself into a global electronics manufacturing powerhouse appear to have stalled a little, with government data showing negligible growth in value of production and a reduction in exports. But the nation has also revealed a plan to improve matters: a supergroup of expats who will help grow its semiconductor industry.…  ( 8 min )

We talk to CEO about projectile-based implosion design British outfit First Light Fusion claims it has achieved nuclear fusion with an approach that could provide cheap, clean power.…  ( 9 min )

Lawsuit accuses Big Blue of cheating investors by shifting systems revenue to trendy cloud, mobile tech Special report  IBM has been sued by investors who claim the company under former CEO Ginni Rometty propped up its stock price and deceived shareholders by misclassifying revenues from its non-strategic mainframe business – and moving said sales to its strategic business segments – in violation of securities regulations.…  ( 12 min )

Who, what, when, how still to be worked out, ironically The Canadian government this week introduced a law bill that would force the likes of Google and Facebook to pay Canadian news publishers for using their articles online.…  ( 8 min )

Denys Iarmak, a Ukrainian member and a "pen tester for the FIN7 financially-motivated hacking group, was sentenced on Thursday to 5 years in prison for breaching victims' networks and stealing credit card information for roughly two years, between November 2016 and November 2018. [...]  ( 4 min )

Google has announced several key policy changes for Android application developers that will increase the security of users, Google Play, and the apps offered by the service. [...]  ( 5 min )

Security researchers have discovered the first malware specifically developed to target Amazon Web Services (AWS) Lambda cloud environments with cryptominers. [...]  ( 4 min )

A new TDS (Traffic Direction System) operation called Parrot has emerged in the wild, having already infected servers hosting 16,500 websites of universities, local governments, adult content platforms, and personal blogs. [...]  ( 4 min )

The Hamas-backed hacking group tracked as 'APT-C-23' was found catfishing Israeli officials working in defense, law, enforcement, and government agencies, ultimately leading to the deployment of new malware. [...]  ( 5 min )

Mobile malware analysts warn about a set of applications available on the Google Play Store, which collected sensitive user data from over 45 million devices. [...]  ( 5 min )

Apples Klage scheint keine abschreckende Wirkung zu zeigen: Im Dezember wurde das iPhone einer jordanischen Journalistin erneut mit Pegasus gehackt.  ( 4 min )

Die Systemverwaltungs-Suite Microsoft System Center erscheint als neue Langzeit-Version und ist an Windows Server 2020 und Azure Stack HCI adaptiert.  ( 3 min )

Ampeln, Stopp-Schilder, Maut-Straßen: Google implementiert neue Informationen in Maps. Teile der Neuerungen sollen bald auch schon in Deutschland laufen.  ( 4 min )

Intel macht seinen schnellsten Desktop-Prozessor noch schneller – preislich hat es der Core i9-12900KS jedoch in sich.  ( 3 min )

Suchmaschinenbetreiber wie Google müssen Anträge prüfen, die das Löschen von Links aus den Ergebnislisten fordern. Das meint ein Generalanwalt des EuGH.  ( 3 min )

Nachdem sie geblitzt wurden, müssen rund 3.000 Autofahrer wegen eines Hackerangriffs von 2021 im Landkreis Ludwigslust-Parchim keine Strafe zahlen.  ( 3 min )

Cisco warnt in mehreren Sicherheitsmeldungen vor Lücken in den Produkten. Außerdem listet das Unternehmen von der Spring-Framework-Lücke betroffene Lösungen.  ( 4 min )

Entwickler sind darüber verärgert, dass Twitter eingebettete, aber schon gelöschte Tweets nicht mehr anzeigt. Damit gehe eine Archivierungsfunktion verloren.  ( 3 min )

Die Abgeordneten wollen eine effizientere Ressourcennutzung fördern, Abfälle reduzieren und eine längere Nutzung von Produkten wie Smartphones unterstützen.  ( 4 min )

Russische iPhone-Nutzer können die App des verhafteten Putin-Kritikers wieder laden. Sie war nach Drohungen gegen Apple-Mitarbeiter entfernt worden.  ( 4 min )

Das jährliche Treffen der Samba-Entwickler findet auch dieses Jahr digital statt und ist kostenlos für Interessierte zugänglich. Das Programm steht bereits.  ( 3 min )

Mehrere VMware-Produkte sind von teils kritischen Lücken betroffen, durch die Angreifer Schadcode einschleusen könnten. Es gibt Updates und Gegenmaßnahmen.  ( 4 min )

An zwei Tagen analysieren Sie aktuelle Angriffstechniken, um die eigene Anfälligkeit und Schutzmaßnahmen besser bewerten zu können. Frühbucherrabatt bis 21.4.  ( 3 min )

Die eigene Kryptowährung "Diem" floppte, nun möchte Meta offenbar seine Finanzprodukte ausbauen. Im Gespräch sind verschiedene Zahlungsmittel für Meta-Apps.  ( 4 min )

US-Bundespolizei ist gegen ein Botnet vorgegangen, das tausende Netzwerkgeräte umfasste. USA und Großbritannien sind sich sicher, dass Russland dahintersteckt.  ( 4 min )

Nur 145 mm hoch trotz 120 mm großem Lüfter: Der NH-D12L wimmelt im Feld der Prozessorkühler mit 92 mm kleinen Lüftern, soll aber besser kühlen.  ( 4 min )

Der Nachfolger des KI-Systems von OpenAI kann nicht nur Bilder anhand von Beschreibungen erstellen, sondern sie auch ergänzen oder umgestalten.  ( 6 min )

PaLM bringt einen Qualitätssprung für große KI-Sprachmodelle: Es kann Code generieren, mit Arithmetik umgehen und Witze erklären. Google spricht von Durchbruch.  ( 7 min )

Neue Aufgaben für iPhone und iPad • macOS 12 auf alten Macs • Mac und iPad wachsen zusammen • Test: Mac Studio und Apple Studio Display, iPhone SE 3, iPad Air 5  ( 8 min )

heise Developer präsentiert software-architektur.tv, Eberhard Wolffs Videocast. Diesmal zu Gast: Jochen Christ, Simon Harrer und Theo Pack.  ( 3 min )

Interaktive Diagramme, ein veränderter Umgang mit angehängten Mediendateien sowie Performance-Verbesserungen sind Teil des neuen Release.  ( 4 min )

Lange ließ sich Teams zwar in Firefox starten, sobald ein Anruf anstand, war der Spaß jedoch vorbei. Nun rüstet Microsoft diese essenziellen Funktionen nach.  ( 3 min )

Die Breko-Einkaufsgemeinschaft bringt mit Gigaset einen Router auf den Markt, den Carrier ihren Kunden anbieten können. Weitere Modelle sind in der Pipeline.  ( 4 min )

Mehrere Produkte von Fortinet mit teils kritischen Sicherheitslücken ermöglichten Angreifern, etwa Schadcode einzuschleusen. Updates dichten die Lücken ab.  ( 4 min )

C++-Profis lernen an drei Tagen die großen Neuerungen in C++20 kennen und wie man sie effektiv in eigenen Projekten einsetzen kann. Einige Plätze frei.  ( 3 min )

Nach Ansicht der Verbraucherschützer verstößt Google mit seinem Design für die Cookie-Banner gegen "nationale Regelungen und EU-Vorgaben".  ( 4 min )

Durch Parks, Fußgängerzonen und andere Orte der Rheinmetropole sind aktuell Apples Kartenerfasser unterwegs. Die Fotos werden aber nicht online gehen.  ( 4 min )

Die neue Version der Linux-Distribution Deepin enthält viele kleinere Änderungen, die hauptsächlich den Arbeitsalltag erleichtern sollen.  ( 4 min )

Der IPv4-Nachfolger verbreitet sich langsam. Wir lassen uns erklären, warum das so lange dauert, was die Vorteile von IPv6 sind und was man selbst machen kann.  ( 4 min )

A first-of-its-kind malware targeting Amazon Web Services' (AWS) Lambda serverless computing platform has been discovered in the wild. Dubbed "Denonia" after the name of the domain it communicates with, "the malware uses newer address resolution techniques for command and control traffic to evade typical detection measures and virtual network access controls," Cado Labs researcher Matt Muir said  ( 3 min )

A threat actor with affiliations to the cyber warfare division of Hamas has been linked to an "elaborate campaign" targeting high-profile Israeli individuals employed in sensitive defense, law enforcement, and emergency services organizations. "The campaign operators use sophisticated social engineering techniques, ultimately aimed to deliver previously undocumented backdoors for Windows and  ( 4 min )

As many as seven malicious Android apps discovered on the Google Play Store masqueraded as antivirus solutions to deploy a banking trojan called SharkBot. "SharkBot steals credentials and banking information," Check Point researchers Alex Shamshur and Raman Ladutska said in a report shared with The Hacker News. "This malware implements a geofencing feature and evasion techniques, which makes it  ( 3 min )

During the last week of March, three major tech companies - Microsoft, Okta, and HubSpot - reported significant data breaches. DEV-0537, also known as LAPSUS$, performed the first two. This highly sophisticated group utilizes state-of-the-art attack vectors to great success. Meanwhile, the group behind the HubSpot breach was not disclosed. This blog will review the three breaches based on  ( 5 min )

Cybersecurity researchers have detailed a "simple but efficient" persistence mechanism adopted by a relatively nascent malware loader called Colibri, which has been observed deploying a Windows information stealer known as Vidar as part of a new campaign. "The attack starts with a malicious Word document deploying a Colibri bot that then delivers the Vidar Stealer," Malwarebytes Labs said in an  ( 3 min )

The U.S. Department of Justice (DoJ) announced that it neutralized Cyclops Blink, a modular botnet controlled by a threat actor known as Sandworm, which has been attributed to the Main Intelligence Directorate of the General Staff of the Armed Forces of the Russian Federation (GRU). "The operation copied and removed malware from vulnerable internet-connected firewall devices that Sandworm used  ( 3 min )

VMware has released security updates to patch eight vulnerabilities spanning its products, some of which could be exploited to launch remote code execution attacks. Tracked from CVE-2022-22954 to CVE-2022-22961 (CVSS scores: 5.3 - 9.8), the issues impact VMware Workspace ONE Access, VMware Identity Manager, VMware vRealize Automation, VMware Cloud Foundation, and vRealize Suite Lifecycle Manager  ( 3 min )

Cisco warnt in mehreren Sicherheitsmeldungen vor Lücken in den Produkten. Außerdem listet das Unternehmen von der Spring-Framework-Lücke betroffene Lösungen.  ( 4 min )

Mehrere VMware-Produkte sind von teils kritischen Lücken betroffen, durch die Angreifer Schadcode einschleusen könnten. Es gibt Updates und Gegenmaßnahmen.  ( 4 min )

Mehrere Produkte von Fortinet mit teils kritischen Sicherheitslücken ermöglichten Angreifern, etwa Schadcode einzuschleusen. Updates dichten die Lücken ab.  ( 4 min )

American cybersecurity company Palo Alto Networks warned customers on Wednesday that some of its firewall, VPN, and XDR products are vulnerable to a high severity OpenSSL infinite loop bug disclosed three weeks ago [...]  ( 3 min )

A new information stealer named FFDroider has emerged, stealing credentials and cookies stored in browsers to hijack victims' social media accounts. [...]  ( 4 min )

British retail chain The Works announced it was forced to shut down several stores due to till issues caused by a cyber-security incident involving unauthorized access to its computer systems. [...]  ( 3 min )

VMware has warned customers to immediately patch critical vulnerabilities in multiple products that could be used by threat actors to launch remote code execution attacks. [...]  ( 3 min )

An ongoing outage affects numerous Atlassian customers, causing their Jira and Confluence instances to not be accessible for over twenty-four hours. [...]  ( 4 min )

US government officials announced today the disruption of the Cyclops Blink botnet controlled by the Russian-backed Sandworm hacking group before being used in attacks. [...]  ( 4 min )

Microsoft has reminded customers that multiple .NET Framework versions signed using the insecure Secure Hash Algorithm 1 (SHA-1) will reach their end of life this month. [...]  ( 3 min )

AMD is investigating an issue in its GPU software suite that causes an auto-adjustment of AMD Ryzen CPU performance settings for users without permission. [...]  ( 4 min )

The U.S. Department of the Treasury's Office has announced sanctions against the cryptocurrency exchange Garantex, which has been linked to illegal transactions for Hydra Market. [...]  ( 4 min )

US chipmaker Intel announced Tuesday night that it had suspended all business operations in Russia, joining tech other companies who pulled out of the country due to the invasion of Ukraine. [...]  ( 3 min )

The Australian Competition & Consumer Commission has published an announcement to raise awareness about a spike in money recovery scams. [...]  ( 4 min )

One hopes they can stay online long enough for customers to evaluate Atlassian opened its Las Vegas Team '22 event this week with products aimed at giving management an insight into projects – and developers an insight into what is actually going on.…  ( 8 min )

Sensitive info swiped from Windows and Android devices, according to report A prolific Middle East team with links to Hamas is said to be using malware and infrastructure to target high-ranking Israeli officials and steal sensitive data from Windows and Android devices.…  ( 9 min )

'Routine maintenance script' blamed for derailed service for unlucky customers Atlassian's Jira and Confluence issue tracking and collaboration services have been down for some customers for two days now and the outage remains ongoing.…  ( 8 min )

Control systems scrubbed, hijacked network devices need to be patched and cleaned The US Justice Department today revealed details of a court-authorized take-down of command-and-control systems the Sandworm cyber-crime ring used to direct network devices infected by its Cyclops Blink malware.…  ( 8 min )

A new arms race emerges DARPA announced a second successful test of its hypersonic cruise missile, adding that the weapon, capable of speeds in excess of Mach 5, is ready for real-world use. …  ( 8 min )

Pieter Abbeel may not be a name you know, but you've probably heard of his work This year's ACM Prize in Computing is going toward a machine learning specialist whose work, even if you haven't heard of him, is likely to be familiar.…  ( 7 min )

Hoarding a bunch of data that 'may prove useful' someday? Data-wrangling product is aimed at you Google has announced a preview on Google Cloud of BigLake, a data lake storage service that it claims can remove data limits by combining data lakes and data warehouses.…  ( 8 min )

DevOps platform tells devs it is ‘continuing to work on a longer-term fix’ DevOps outfit CircleCI is suffering from performance issues that have been ongoing for most of the day, with developers left waiting for the platform to come back online.…  ( 8 min )

Leak highlights worker offboarding policies as SaaS use grows A former employee with Block used the digital financial services firm's Cash App products to access and download personal information about US customers in December 2021, the firm has claimed.…  ( 10 min )

Points to on-prem pain with legacy systems, rising maintenance costs Boeing has decided that when it comes to the cloud there's no reason to limit itself to just one of the big public cloud players, so instead it chose all three.…  ( 8 min )

Service 'likely to have a significant impact on market for provision of broadband internet access' France's Conseil d'Etat court is revoking the license [PDF] authorizing Elon Musk's Starlink outfit to use two frequency bands to provide satellite internet in France.…  ( 8 min )

The same architecture as the top-ranked "Fugaku" supercomputer with services bundled Fujitsu has confirmed it will be opening access to the same system architecture underpinning the global top supercomputer, "Fugaku" via an emerging cloud service.…  ( 9 min )

Pop quiz: you've got your own edge computer in space. What do you do with it? Microsoft is making a deal with satellite infrastructure outfit Loft Orbital to integrate some of the Windows-maker's cloud technology.…  ( 9 min )

Some 1,200 of chipmaker's employees based in Russia, a country accounting for 0.1% of global chip sales in 2021 Intel is temporarily halting all business operations in Russia following the decision a little more than a month ago to pause sales to both Russia and its puppet state Belarus.…  ( 8 min )

Cramming a full Windows desktop into a teeny tiny space Windows 10 – as we pointed out last week – still rules Microsoft's user base, as now evidenced by the latest arrival of Windows 10 IoT Enterprise on NXP hardware.…  ( 8 min )

Is that... a good or bad thing? Deep-learning algorithms have shown themselves equal to humans in detecting patients at high-risk of developing Type-2 diabetes by analyzing CT scans of their pancreases, according to a research paper published on Tuesday.…  ( 8 min )

Plus: Big Tech company pays a little bit more tax shock Spare a thought for Microsoft's British tentacle. It reported surging local revenues for fiscal 2021 yet profits shrunk, according to financial accounts.…  ( 8 min )

So says High Court after appeal from rights org dismissed A privacy rights org this week lost an appeal [PDF] in a case about the sharing of Bulk Personal Datasets (BPDs) by MI5, MI6, and GCHQ with foreign intelligence agencies.…  ( 11 min )

About 35-40 per cent of iGiant's desktop OS installs potentially vulnerable, says Intego Apple last week patched two actively exploited vulnerabilities in macOS Monterey yet has left users of older supported versions of its desktop operating system unprotected.…  ( 9 min )

Regulator rules ban on in-app links to payment options that don't touch the Play Store is not in the spirit of the law South Korea's Communications Commission has determined that Google has not complied with the nation's law – the first of its kind in the world – requiring operators of app stores to allow third-party payments.…  ( 8 min )

Increases regulation on operators to stop money laundering and terror funding Singapore's Monetary Authority (MAS) has opined that all transactions involving digital tokens carry higher inherent money laundering and terrorist funding risks, and introduced new regulations so that local players are less likely to facilitate such crimes.…  ( 8 min )

US has over half the market, Japan is a tale of woe China finished 2021 holding just four per cent of global semiconductor market, research firm IC Insights stated on Tuesday.…  ( 8 min )

Drones, delivery-bots and robo-sprayers at work in locked-down megacity State-controlled media in China is proudly reporting the use of robots to facilitate the “temporary closed-off management” of Shanghai, which has experienced a new surge of COVID.…  ( 8 min )

'Just the beginning of our Windows and Microsoft cloud integration' says Windows boss Microsoft has revealed plans to make cloudy Windows 11 PCs easily available from, and integrated with, its flagship OS on physical PCs, and hinted at much more integration between Redmond's desktop operating system and its clouds.…  ( 9 min )

US also charges Russia-based web host owner regarding cyber-crime market US and German federal agencies came down hard on Hydra, the longest-running known dark-web marketplace trafficking in illegal drugs and money-laundering services, with a multi-pronged attack that aimed to cut off multiple heads of the nefarious online beast.…  ( 8 min )

Amazingly SpaceX isn't on the list Amazon's proposed broadband satellite constellation, Project Kuiper, has inched closer to making it into orbit, even if some of the rockets it intends to use have yet to take their first flights.…  ( 8 min )

Apples AirTag-Tracker werden den Protokollen zufolge hauptsächlich für Diebstähle und Stalking zweckentfremdet, wobei wohl vor allem Frauen zum Ziel werden.  ( 4 min )

Ein Leitfaden soll Nutzer von Google Chrome durch die Einstellungen zum Datenschutz führen. In den nächsten Wochen soll der Leitfaden im Browser verfügbar sein.  ( 3 min )

Atlassian stellt vier neue Tools vor. Ein Data Lake bündelt künftig Daten aus allen Atlassian-Anwendungen, Teams und Entwickler sollen noch effizienter werden.  ( 4 min )

Der Zeitplan für das große Update der Blogsoftware steht fest, auch, wie es aussehen soll. Erst einmal haben die Entwickler in Version 5.9.3 Fehler behoben.  ( 4 min )

Spieletaugliche Grafikkarten kosten nicht mehr unbedingt ein Vermögen – erste Modelle von AMD und Nvidia halten sich sogar an die offiziellen Preisempfehlungen.  ( 5 min )

Aktiv ausgenutzte Lücken hat Apple nur in iOS 15 und macOS 12 gestopft. Sicherheitsforschern zufolge sind aber auch ältere Betriebssystemversionen verwundbar.  ( 4 min )

In Cookie-Bannern muss man sich oft durch zahlreiche Ebenen klicken. Das soll jetzt zumindest bei Google ein Ende haben, sagt Hamburgs Datenschützer.  ( 3 min )

In Tails 4.29 haben die Maintainer die zentralen Anwendungen aktualisiert. Die Beta von Tails 5.0 liefert jedoch einen Ausblick in die Zukunft.  ( 4 min )

Die nächste Edition der Programmiersprache soll einfacher zu lernen sein und Erweiterungen für das Async/Await-Pattern mitbringen.  ( 5 min )

Die Online-Konferenz zur Web-API-Entwicklung findet am 27. April 2022 statt. Noch gilt der Frühbucherrabatt, durch den man ordentlich sparen kann.  ( 4 min )

Das ETL-Framework soll Data Engineers das aufwendige Erstellen, Betreiben und Warten von Daten-Pipelines erleichtern.  ( 4 min )

Da es für die Verarbeitung personenbezogener Daten von Facebook-Fanpages keine wirksame Rechtsgrundlage gibt, sollen Landesbehörden ihre Fanseiten abschalten.  ( 3 min )

Wer einen Desktop-PCs mit Ryzen-Prozessor und Radeon-Grafikkarte verwendet, sollte ein Blick auf die BIOS-Einstellungen werfen. Die CPU könnte übertaktet sein.  ( 4 min )

Welche Programmiersprachen nutzen Hacker und Cracker? Ergebnisse des ersten quantitativen Survey bei Deutschlands größter Organisation für Informationsfreiheit.  ( 7 min )

Hier beschreiben wir, worum es geht: Unterrichten. Ein Fokus, der viele hier veröffentlichte Beiträge prägt und über dessen Relevanz sich fast alle einig sind.  ( 5 min )

Programmier-Erfahrene in anderen Sprachen erhalten an drei Tagen einen umfassenden, praxisorientierten Einstieg in Python. Noch einige Plätze frei.  ( 3 min )

Mit dem Update des Webbrowsers Vivaldi ist die Suchmaschine Qwant integriert. Außerdem soll eine Datenschutz-Statistik Informationen zum Werbetracking liefern.  ( 4 min )

Bestimmten Apps ist es erlaubt, ihre Abokosten ohne Opt-in durch den Nutzer zu erhöhen. Das sei "ein Versuch", bestätigte Apple.  ( 4 min )

Neue Aufgaben für iPhone und iPad • macOS 12 auf alten Macs • Mac und iPad wachsen zusammen • Test: Mac Studio und Apple Studio Display, iPhone SE 3, iPad Air 5  ( 8 min )

Zum Android-Patchday im April behebt Google zahlreiche sicherheitsrelevante Fehler. Die meisten betreffen Qualcomm-SoCs.  ( 3 min )

Lernen Sie die Vorteile von Azure AD kennen: Mit Active Directory aus der Cloud hybride Identitäten sicher verwalten. 10 Prozent Frühbucherrabatt bis 20.4.  ( 3 min )

Die World Wide Developers Conference wird trotz abklingender Pandemie erneut nicht live stattfinden. Das Online-Event startet am 6. Juni mit einer Keynote.  ( 4 min )

On a sunny morning last December, Iyus Ruswandi, a 35-year-old furniture maker in the village of Gunungguruh, Indonesia, was woken up early by his mother. A technology company was holding some kind of “social assistance giveaway” at the local Islamic elementary school, she said, and she urged him to go. Ruswandi joined a long line…  ( 24 min )

When OpenAI revealed its picture-making neural network DALL-E in early 2021, the program’s human-like ability to combine different concepts in new ways was striking. The string of images that DALL-E produced on demand were surreal and cartoonish, but they showed that the AI had learned key lessons about how the world fits together. DALL-E’s avocado…  ( 7 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. A battle is raging over long covid in children Before Jasmin got covid-19 last year, she was an especially active 10-year-old. She loved dancing, swimming, and gymnastics. “She was always upside-down, doing handstands,”…  ( 4 min )

Before Jasmin got covid-19 last year, she was an especially active 10-year-old. She loved dancing, swimming, and gymnastics. “She was always upside-down, doing handstands,” says her mother, Binita Kane. Although she only had a mild case of the virus, she developed lasting, debilitating symptoms that kept her out of school. Jasmin, now 11, has abandoned…  ( 9 min )

Communication is a vital skill for any leader at an organization, regardless of seniority. For security leaders, this goes double. Communicating clearly works on multiple levels. On the one hand, security leaders and CISOs must be able to communicate strategies clearly – instructions, incident response plans, and security policies. On the other, they must be able to communicate the importance of  ( 4 min )

Threat actors have been distributing malicious applications under the guise of seemingly harmless shopping apps to target customers of eight Malaysian banks since at least November 2021. The attacks involved setting up fraudulent but legitimate-looking websites to trick users into downloading the apps, Slovak cybersecurity firm ESET said in a report shared with The Hacker News. The copycat  ( 3 min )

Ukraine's technical security and intelligence service is warning of a new wave of cyber attacks that are aimed at gaining access to users' Telegram accounts. "The criminals sent messages with malicious links to the Telegram website in order to gain unauthorized access to the records, including the possibility to transfer a one-time code from SMS," the State Service of Special Communication and  ( 3 min )

Block, the company formerly known as Square, has disclosed a data breach that involved a former employee downloading unspecified reports pertaining to its Cash App Investing that contained information about its U.S. customers. "While this employee had regular access to these reports as part of their past job responsibilities, in this instance these reports were accessed without permission after  ( 3 min )

The U.S. Treasury Department on Tuesday sanctioned Hydra, the same day German law enforcement authorities disrupted the world's largest and longest-running dark web marketplace following a coordinated operation in partnership with U.S. officials. The sanctions are part of an "international effort to disrupt proliferation of malicious cybercrime services, dangerous drugs, and other illegal  ( 4 min )

In this series of articles, we highlight design patterns and techniques to design better interfaces. You can also find more examples in [“Smart Interface Design Patterns”](https://smart-interface-design-patterns.com/), a 6h-video course with 100s of hand-picked examples, curated by Vitaly.  ( 23 min )

[Devs For Ukraine](https://www.devsforukraine.io/) is a free online charity conference organized by the lovely people at Remote. Two days filled with talks from engineering leaders around the globe, in support of Ukraine. April 25–26.  ( 1 min )

Zum Android-Patchday im April behebt Google zahlreiche sicherheitsrelevante Fehler. Die meisten betreffen Qualcomm-SoCs.  ( 3 min )

Some in tech industry are ecstatic: 'A historic step forward' and timing 'couldn't be any better' The US State Department this week launched an agency responsible for developing online defense and privacy-protection policies and direction as the Biden administration seeks to integrate cybersecurity into America's foreign relations.  …  ( 11 min )

Filter list reportedly would block 'living wage,' 'pay rises,' 'restroom,' etc Amazon allegedly planned an internal messaging app that filtered words like "union," "pay rise," and "ethics," alongside challenging and offensive terms, but after public disclosure of the project, the biz told The Register the software has not been approved and may never be deployed.…  ( 9 min )

Not just about revenue figures, we're told: Investment in staff and services matters, too Exclusive  While Nvidia is becoming a vertically integrated business by owning several core computing technologies, the GPU giant still relies on third-party companies to sell most of its wares, which is why it goes to great lengths to incentivize and recognize the contributions of these partners.…  ( 9 min )

I'm sorry, Dave, I'm afraid you can't go out dressed like that Video  From the department of "we've got this supercomputer on the space station, what shall we do with it?" comes news of AI technology being used to check the gloves of spacewalkers.…  ( 8 min )

Updates inspected for security blunders before some git can exploit them GitHub is aiming to help users avoid inadvertent leaks of confidential objects like access tokens by scanning repository content for such secrets before a git push is executed.…  ( 8 min )

Millions of rows per second in real time, so the legend goes... A data analytics company claiming to be able to process millions of rows per second, in real time, has just closed out a Series A funding round to take-in $37 million.…  ( 7 min )

US sanctions force company to sell Honor and x86 units, current and retired staff bask in those profits Flush from the sale of various business units, Huawei has distributed a whopping $9.65 billion dividend to current and retired staff under its Employee Shareholders Scheme (ESS).…  ( 8 min )

RUSI argues for collaboration, while others note all 'scans' compromise secure encryption End-to-end encryption (E2EE) has become a global flashpoint in the ongoing debate between the security of private communications versus the need of law enforcement agencies to protect the public from criminals.…  ( 9 min )

Technology is one part of a larger jam-resistant satellite scheme, important for warfare Boeing has hit a milestone with its anti-jam satellite communications.…  ( 8 min )

Gelsinger's firm drops details on crypto chip – including hash rate of up to 580GHps Intel has disclosed more details of its Blockscale ASIC, the firm's entry into the realm of cryptocurrency mining with a dedicated chip built to provide users with energy-efficient hashing for proof-of-work consensus networks.…  ( 8 min )

Syria, Sudan, Belarus, Ukraine came top. Are you starting to see a pattern? In an analysis of 3,356 fixed-line broadband deals in 220 countries, price comparison website Cable.co.uk found that the UK has the 92nd cheapest internet, beating the US, which came in 134th place.…  ( 8 min )

Linux slinger's gear can now look after ███ ███ ███ in secure ███ ███ Linux slinger Red Hat has achieved Common Criteria certification for Red Hat Enterprise Linux 8.2.…  ( 8 min )

For this energy-efficient mega-PaLM, you gotta hand it to them Though AI models will continue to get increasingly more powerful the larger they become, performance improvements from scale have not yet plateaued, according to researchers at Google.…  ( 9 min )

Big iron also claimed to be 'quantum-safe' to protect against future hacks IBM has lifted the covers off the z16, the newest member of its Z Series mainframe family which focuses on the financial services industry with a new processor that has built-in AI acceleration for real-time fraud detection.…  ( 10 min )

Judge ponders battle royale between all three to avoid unhelpful overlaps Proceedings in the legal dispute between Epic Games and Apple have bogged down in Australia, and won't reach a courtroom until 2024.…  ( 9 min )

Move is supposed to be double-plus good for supply-chain security Google is planning to tighten the security around its open source Go programming language by requiring two Google employees to be involved in code changes, where previously only one approver needed to be company-affiliated.…  ( 9 min )

Customers in Indonesia promised warning of wobbles sooner than is otherwise possible Xiaomi has added an earthquake alert system to some of its smartphones, starting with a trial in Indonesia, as a result of a collaboration between the smartphone maker and Indonesian and Chinese government-supported agencies.…  ( 9 min )

Crooks used RAT to hijack superusers at India's Mahesh Bank, stole millions An Indian bank that did not have a valid firewall license, had not employed phishing protection, lacked an intrusion detection system and eschewed use of any intrusion prevention system has, shockingly, been compromised by criminals who made off with millions of rupees.…  ( 8 min )

This matters for China – and for HPE, Intel … and possibly Apple A consortium led by Chinese government-backed Beijing Jianguang Asset Management Co. Ltd (JAC Capital) has injected $9.4 billion into ailing Chinese chipmaker Tsinghua Unigroup, in a deal that will be appreciated by many big tech industry players.…  ( 8 min )

'Up to 50%' better price-performance than x86 equivalents claimed Microsoft claims its latest Arm-powered Azure virtual machines can provide up to 50 percent better price-performance than similar instances using x86 processors.…  ( 9 min )

'Up to 50%' better price-performance than x86 equivalents ... Well, 2% is still up to 50%, we guess Microsoft claims its latest Arm-powered Azure virtual machines can provide up to 50 percent better price-performance than similar instances using x86 processors. The keywords here are "up to" as it matters whether or not you're relying on hyperthreading on the x86 systems.…  ( 9 min )

Staff socially engineered into handing over internal system credentials Mailchimp has confirmed a miscreant gained access to one of its internal tools and used it to steal data belonging to 100-plus high-value customers.…  ( 9 min )

Everything's bigger in Texas, even the flying package-slinging robots Wing will this Thursday launch a commercial drone delivery service in a major US metropolitan area, a first for the Alphabet-owned startup.…  ( 8 min )

Cash App is notifying 8.2 million current and former US customers of a data breach after a former employee accessed their account information. [...]  ( 3 min )

Security researchers have uncovered a long-running malicious campaign from hackers associated with the Chinese government who are using VLC Media Player to launch a custom malware loader. [...]  ( 4 min )

Roughly one out of six organizations worldwide that are impacted by the Spring4Shell zero-day vulnerability have already been targeted by threat actors, according to statistics from one cybersecurity company. [...]  ( 3 min )

Microsoft said that it's currently tracking a "low volume of exploit attempts" targeting the critical Spring4Shell (aka SpringShell) remote code execution (RCE) vulnerability across its cloud services. [...]  ( 3 min )

Microsoft has announced that Exchange, SharePoint, and Skype for Business on-premises are now part of the Applications and On-Premises Servers Bounty Program starting today. [...]  ( 3 min )

Microsoft has revealed that Window 365, the company's virtualized desktop service, will get support for new features to make it easier to use log into and work with Cloud PCs from any device. [...]  ( 3 min )

Microsoft has unveiled new Windows 11 features at today's 'Windows Powers the Future of Hybrid Work' event, including a redesigned File Explorer, new accessibility features, Focus for Windows 11, and more. [...]  ( 5 min )

Microsoft says that Windows 11 will get more security improvements in upcoming releases, which will add more protection against cybersecurity threats, offer better encryption, and block malicious apps and drivers. [...]  ( 4 min )

Microsoft has resolved a newly acknowledged issue causing Windows apps that use WebView2 to render Internet content incorrectly outside their windows after installing this month's optional preview cumulative updates.  [...]  ( 3 min )

The Computer Emergency Response Team of Ukraine (CERT-UA) has spotted new phishing attempts attributed to the Russian threat group tracked as Armageddon (Gamaredon). [...]  ( 4 min )

Microsoft has removed a compatibility hold blocking Windows 11 upgrades for Windows 10 customers after fixing a known issue leading to problems importing Internet Explorer 11 (IE11) data into Microsoft Edge. [...]  ( 3 min )

The servers of Hydra Market, the most prominent Russian darknet platform for selling drugs and money laundering, have been seized by the German police. [...]  ( 3 min )

A new WhatsApp phishing campaign impersonating WhatsApp's voice message feature has been discovered, attempting to spread information-stealing malware to at least 27,655 email addresses. [...]  ( 4 min )

Mit der Version 99 ermöglicht Firefox seinen Nutzern unter anderem, Kreditkarteninformationen im Browser zu hinterlegen und ergänzt einen Vorlese-Shortcut.  ( 4 min )

Intel wechselt bei seiner zweiten ASIC-Generation fürs Bitcoin-Mining von der eigenen Intel-4-Fertigung zu TSMCs 5 nm – die Chips werden so konkurrenzfähig.  ( 4 min )

Neue Windows Features rund um Sicherheit und Cloud sind die Hauptthemen für eine hybride Arbeitswelt zwischen Büro und Homeoffice.  ( 5 min )

Im Juni startet die Minds Mastering Machines wieder vor Ort mit 36 Vorträgen rund um aktuelle ML-Themen. Frühbuchertickets gibt es bis zum 11. April.  ( 4 min )

Der Chef von Twitter, Parag Agrawal, hat Elon Musk im Verwaltungsrat aufgenommen. Erst seit Kurzem ist Musk größter Aktionär des Unternehmens.  ( 3 min )

Facebook-Mutterkonzern Meta hat Hashtags blockiert, die mit den Gräueltaten in Butscha zusammenhingen. Mittlerweile habe Meta die Hashtags wieder freigegeben.  ( 3 min )

Die Rust Foundation stellt mit dem neuen Community Grants Program 2022 einen Mechanismus bereit, um die Rust-Entwicklergemeinde bei der Arbeit zu unterstützen.  ( 6 min )

Microsoft setzt mit dem Release auf mehr Sicherheit sowie verbessertes Dependency Management, und unterstützt beim Erstellen produktionsreifer Anwendungen.  ( 4 min )

Sechs Prozent der 16- bis 75-Jährigen hierzulande sind ohne Internet. EU-weit belegt Deutschland damit den vierten Platz, teilt das Statistische Bundesamt mit.  ( 4 min )

James Phillips verlässt Microsoft. Zuletzt leitete er die Abteilung, die sich vor allem mit KI- und Cloud-Produkten des Unternehmens beschäftigt.  ( 3 min )

Ein neuer Schub an Ryzen-Prozessoren für AMDs AM4-Plattform ist im deutschen Handel gelandet, darunter der Ryzen 5 5600. Die Ryzen-9-CPUs sind jetzt günstiger.  ( 4 min )

Nach dem Erfolg der hauseigenen Graviton-Prozessoren in der Amazon-Cloud bietet Microsoft jetzt VMs mit dem 80-Kerner Ampere Altra an.  ( 3 min )

Neben Erweiterungen für den Compiler bringt das Release eine Vorschau auf generische Typen, die auf keinen Fall Null sind, und Context Receivers.  ( 6 min )

Nach einem Einbruch beim Marketing-Mail-Anbieter MailChimp haben Cyberkriminelle versucht, per Phishing an Kryptowährungen von Krypto-Wallet-Kunden zu gelangen.  ( 4 min )

Pentests helfen, die eigene IT auf Sicherheitsprobleme zu untersuchen. Worauf es dabei ankommt, zeigt Ihnen dieser Online-Workshop. 10 Prozent Rabatt bis 19.4.  ( 3 min )

MacBook Pro M1 2021 und Pro Display XDR erreichen dauerhaft bis zu 1000 Candela – allerdings fehlt dazu eine Konfigurationsoption. Eine neue Software kann es.  ( 4 min )

In jeweils dreitägigen Seminaren für Einsteiger und Fortgeschrittene lernen Teilnehmende die Grundlagen, Besonderheiten und den praktischen Einsatz von Node.js.  ( 4 min )

Das Active Directory ist der Dreh- und Angelpunkt bei Ransomware-Angriffen. Wie man es absichert, zeigt das neue iX kompakt auf über 170 Seiten.  ( 4 min )

Neue Versionen des Webbrowsers Google Chrome schließen eine Sicherheitslücke in der JavaScript-Engine V8. Vermutlich sind Edge und Chromium ebenfalls betroffen.  ( 4 min )

Auf zwei neue Funktionen setzt IBMs z16: Der neue Mainframe soll per KI Transaktionen in Echtzeit überprüfen können und ein quantensicheres Computing bieten.  ( 5 min )

Mit der Version 99 ermöglicht Firefox seinen Nutzern unter anderem, Kreditkarteninformationen im Browser zu hinterlegen und ergänzt einen Vorlese-Shortcut.  ( 4 min )

Neue Versionen des Webbrowsers Google Chrome schließen eine Sicherheitslücke in der JavaScript-Engine V8. Vermutlich sind Edge und Chromium ebenfalls betroffen.  ( 4 min )

For many people, the concept of directed energy, or lasers, conjures images of lightsabers and bank vault security systems—the stuff of Hollywood movies. However, the fact is, lasers are commonly used in everyday life applications, from surgery to optical communications. At Technology Innovation Institute’s (TII) Directed Energy Research Center (DERC), scientists and engineers are using…  ( 12 min )

Between a series of recent high-profile cybersecurity incidents and the heightened geopolitical tensions, there's rarely been a more dangerous cybersecurity environment. It's a danger that affects every organization – automated attack campaigns don't discriminate between targets. The situation is driven in large part due to a relentless rise in vulnerabilities, with tens of thousands of  ( 6 min )

The notorious cybercrime group known as FIN7 has diversified its initial access vectors to incorporate software supply chain compromise and the use of stolen credentials, new research has revealed. "Data theft extortion or ransomware deployment following FIN7-attributed activity at multiple organizations, as well as technical overlaps, suggests that FIN7 actors have been associated with various  ( 3 min )

Germany's Federal Criminal Police Office, the Bundeskriminalamt (BKA), on Tuesday announced the official takedown of Hydra, the world's largest illegal dark web marketplace that has cumulatively facilitated over $5 billion in Bitcoin transactions to date. "Bitcoins amounting to currently the equivalent of approximately €23 million were seized, which are attributed to the marketplace," the BKA  ( 3 min )

With the growth in digital transformation, the API management market is set to grow by more than 30%  by the year 2025 as more businesses build web APIs and consumers grow to rely on them for everything from mobile apps to customized digital services. As part of strategic business planning, an API helps generate revenue by allowing customers access to the functionality of a website or computer  ( 5 min )

A Chinese state-backed advanced persistent threat (APT) group known for singling out Japanese entities has been attributed to a new long-running espionage campaign targeting new geographies, suggesting a "widening" of the threat actor's targeting. The widespread intrusions, which are believed to have commenced at the earliest in mid-2021 and continued as recently as February 2022, have been tied  ( 3 min )

Email marketing service Mailchimp on Monday revealed a data breach that resulted in the compromise of an internal tool to gain unauthorized access to customer accounts and stage phishing attacks.  The development was first reported by Bleeping Computer. The company, which was acquired by financial software firm Intuit in September 2021, told the publication that it became aware of the incident  ( 3 min )

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added the recently disclosed remote code execution (RCE) vulnerability affecting the Spring Framework, to its Known Exploited Vulnerabilities Catalog based on "evidence of active exploitation." The critical severity flaw, assigned the identifier CVE-2022-22965 (CVSS score: 9.8) and dubbed "Spring4Shell", impacts Spring  ( 3 min )

Whether you work in-house or for an external agency, we all share one challenge — dealing with stakeholders, be they your boss, colleagues, or clients. In this post, veteran web designer Paul Boag shares his approach to getting things done in even the most challenging organizations.  ( 8 min )

Russian troops have also lost 676 tanks, 1,858 armored fighting vehicles, 332 artillery pieces, 107 multiple rocket launchers, 55 surface-to-air missiles, 150 jets, 134 helicopters, 7 ships, 76 fuel tanks, 94 drones, and 4 ballistic missile systems, the General Staff said on April 5. The post Ukraine’s General Staff: 18,500 Russian soldiers killed during invasion. appeared first on The Kyiv Independent.  ( 1 min )

Ursula von der Leyen and Josep Borrell will arrive in Kyiv this week, Ivan Jansa said on April 5. He also said that the embassies of the EU mission and Lithuania would return to Kyiv. The post Slovenian prime minister says European Commission president, EU foreign minister will visit Kyiv. appeared first on The Kyiv Independent.  ( 1 min )

At least 266 children have been injured, the prosecutors said on April 5. This figure does not take into account children’s casualties in front-line areas such as Mariupol in Donetsk Oblast, as well as Kyiv, Chernihiv and Luhansk oblasts. The post Prosecutor General’s Office: At least 165 children killed as a result of Russian aggression. appeared first on The Kyiv Independent.  ( 1 min )

Sumy Oblast Governor Dmytro Zhyvytsky reported on April 5 that in Konotop district of Sumy Oblast, the Ukrainian military found the bodies of at least three tortured civilians in places where Russian forces had been stationed. Russians withdrew from Sumy region on April 3. The post Bodies of tortured civilians found in Sumy Oblast. appeared first on The Kyiv Independent.  ( 1 min )

The deal is valued at $1.6 billion to provide Bulgaria with fighter jets and related support equipment. According to Reuters, U.S. officials said the sale agreement was not directly related to Russia’s war on Ukraine. The war has prompted Ukraine’s government to ask that countries with MiG aircraft – including […] The post US State Department approves potential sale of up to eight F-16 aircraft to Bulgaria. appeared first on The Kyiv Independent.  ( 1 min )

The UCC, a group representing over 1.3 million Ukrainian-Canadians, set forth the idea to include the fund in the federal government’s budget. If successful, the fund would provide additional financing for fighter aircraft, weapon systems and munitions along with a financing program similar to the Marshall Plan implemented after World […] The post Ukrainian Canadian Congress proposes a ‘Ukraine Victory Fund.’ appeared first on The Kyiv Independent.  ( 1 min )

The German software giant SAP appears to have been hypocritical about its promises to stop providing cloud services to Russian clients over Russia’s war in Ukraine. According to a document obtained by the Kyiv Independent, just a day before the company’s public announcement to shut down its cloud services in […] The post Germany’s software giant SAP keeps its Russian clients despite claims it shut down cloud services in Russia appeared first on The Kyiv Independent.  ( 3 min )

Artillery rounds hit the building seven times, according to Ukraine’s military, damaging manufacturing equipment. There’s no threat to local residents. The post Russian forces shell chemical plant in Donetsk Oblast. appeared first on The Kyiv Independent.  ( 1 min )

Sirens have been activated in the Cherkasy, Chernivtsi, Dnipropetrovsk, Donetsk, Ivano-Frankivsk, Kharkiv, Khmelnytsky, Kirovohrad, Kyiv, Lviv, Mykolaiv, Odesa, Poltava, Rivne, Sumy, Ternopil, Vinnytsia, Volyn, Zakarpattya, Zaporizhzhia and Zhytomyr oblasts and in the city of Kyiv. The post Air raid alerts go off in almost every region of Ukraine. appeared first on The Kyiv Independent.  ( 1 min )

Editor’s note: Editorials are articles that present the opinion of the editorial team of the Kyiv Independent.  We write this editorial with difficulty. Journalists are the people of words, but right now it’s hard to find the ones to reflect what we feel.  The uncovered atrocities of Russians have left […] The post Editorial: Give Ukraine everything it asks for and now appeared first on The Kyiv Independent.  ( 5 min )

If your internet megaphone lands you in enough trouble, might as well own part of it Social media service Twitter saw its stock surge on Monday because tech thinkfluencer Elon Musk took a 9.2 percent stake in the company.…  ( 9 min )

Investors given 'materially incomplete and misleading' info, it is claimed A Mandiant shareholder has launched a legal challenge to block Google's $5.4 billion takeover of the threat intelligence firm.…  ( 9 min )

If your boss is bugging you about this tech, here's how to respond The state of the metaverse, says Forrester, is that there isn't one. Yet.…  ( 9 min )

Pat Gelsinger won't unlock most of that unless Xeon giant's stock goes sky high  ( 10 min )

Web giant's racks and appliances now generally available Google Distributed Cloud Edge (GDCE) has hit general availability.…  ( 7 min )

Thought Sacha Baron Cohen was a terrible threat actor? Get a load of this: encrypts/steals data, records audio/video and controls keyboard A new remote access trojan (RAT) dubbed "Borat" doesn't come with many laughs but offers bad actors a menu of cyberthreats to choose from.…  ( 8 min )

Semiconductor drought 'affecting all plants and models' says automaker Volvo is again blaming "chip shortages" after the company experienced a 22.1 percent drop in sales for cars in March compared to the previous year.…  ( 7 min )

Talks up 'Client-Edge-Cloud-Network-Intelligence' as it looks to consolidate lockdown gains Lenovo says it is looking to hire 12,000 workers in research and development (R&D) roles.…  ( 8 min )

Community-supported, Red Hat-compatible distro now available to Microsoft fans A Windows Subsystem for Linux-friendly version of AlmaLinux has turned up in the Microsoft Store, adding to an impressive array of options for WSL users.…  ( 7 min )

One year in, CEO Yuki Kusumi wants diversification and growth Panasonic will invest ¥600 billion ($4.89 billion) in electronic vehicle (EV) batteries, hydrogen energy, workplace digitization and supply chain software in a strategy shift for the 104-year old Japanese multinational.…  ( 8 min )

Reportedly has already sent a Q&A to Microsoft cloud rivals, customers The European Commission is starting to gently probe allegations against Microsoft of anti-competitive practices in the cloud computing industry as it pertains to the company’s licensing rules.…  ( 9 min )

Strengthens SDN smarts for hyperscalers, small clouds, and maybe 5G, gives Xilinx some work too AMD has announced it will acquire networking vendor Pensando for $1.9 billion.…  ( 7 min )

We talk to some players in the Apple device management game MacAD  No, it isn't an April Fool's joke we forgot to publish. The Register* actually made it to a recent in-person Apple event: the 2022 Mac Administrator and Developer conference, MacAD. Apple, it seems, may be getting ever more serious about the enterprise.…  ( 9 min )

Customers wake to a nightmare as payment data pilfered from UK website Emma Sleep Company has confirmed to The Reg that it suffered a Magecart attack which enabled ne'er-do-wells to skim customers' credit or debit card data from its website.…  ( 9 min )

Who left that bit of rocket there? It's getting a bit crowded in orbit There was a sigh of relief from ESA controllers over the weekend as the Copernicus Sentinel-1A satellite successfully dodged a decades-old rocket fragment.…  ( 7 min )

The language wars were fun, but they're done Opinion  Here's a recipe for happiness. Don't get overexcited by the latest "C is not a language" kerfuffle.…  ( 9 min )

Beware the terminated techie: Revenge is a dish best preceded by an asterisk Who, Me?  With The Great Resignation upon us, depending on which survey you read, we present a reminder that when a programmer has to go… just let them go. Or face whatever form their vengeance might take. Welcome to Who, Me?…  ( 8 min )

Unusual move sees regulator open consultation on access to audit documents China's Securities Regulatory Commission has opened a consultation on revised regulations aimed at avoiding trouble for local tech companies that list on US stock markets.…  ( 8 min )

Meng Wanzhou will get her regular six-month stints in the role, starting who knows when Huawei executive Meng Wanzhou – who was famously held in Canada and is the daughter of company founder Ren Zhengfei – has quietly been named as one of three people who share the role as chair of the Chinese company's board.…  ( 8 min )

Asset management outfit Macquarie will buy existing bit barns. But first, check out the shiny new 15.2MW bit barn in Indonesia Japanese giant NTT has found a friend to help it fund the planned expansion of its datacenter fleet.…  ( 8 min )

Shame it's not finished – Microsoft has promised more hybrid cloud capabilities are coming real soon now Microsoft has quietly slipped System Center 2022 out the door, more than six months after the debut of Windows Server 2022 – but also flagged the product is not in its final state.…  ( 8 min )

GitHub announced on Monday that it expanded its code hosting platform's secrets scanning capabilities for GitHub Advanced Security customers to automatically block secret leaks. [...]  ( 4 min )

Cloudflare sees signs of Russians increasingly turning to Western news sources to get accurate information about the situation in Ukraine. [...]  ( 4 min )

​​​​​​​VMWare has published a security advisory for the critical remote code execution vulnerability known as Spring4Shell, which impacts multiple of its cloud computing and virtualization products. [...]  ( 4 min )

Email marketing firm MailChimp disclosed on Sunday that they had been hit by hackers who gained access to internal customer support and account management tools to steal audience data and conduct phishing attacks. [...]  ( 4 min )

Threat analysts have compiled a detailed technical report on FIN7 operations from late 2021 to early 2022, showing that the actor is still very active, evolving, and trying new monetization methods. [...]  ( 4 min )

Content delivery networks, or CDNs, allow you to improve the delivery of your website’s static resources, most notably, with CDN caching. They do this by serving your content from edge locations, which are located all over the world. When a … Adding CDN Caching to a Vite Build originally published on CSS-Tricks. You should get the newsletter.  ( 5 min )

Tutoren des Nachhilfe-Startups Gostudent erheben schwere Vorwürfe gegen die Plattform: Es ist von Datenschutzverstößen und verspäteten Lohnzahlungen die Rede.  ( 4 min )

Ein halbes Jahr nach der Einführung des neu aufgelegten MacBook Pro vertreibt der Hersteller erstmals generalüberholte Modelle zu einem niedrigeren Preis.  ( 4 min )

Die Western Australia Police hofft, durch eine iPhone-Integration in Einsatzfahrzeuge die Sicherheit und Effizienz zu erhöhen.  ( 4 min )

Die neue Online-Konferenzreihe von DER SPIEGEL und Heise behandelt Themen wie Führungskompetenz, Zusammenarbeit in Teams sowie hilfreiche Tools und Techniken.  ( 4 min )

In einer globalen Operation haben internationale Strafverfolger 65 Verdächtige verhaftet, die betrügerische Geschäftsmails zur Abzocke von Opfern sendeten.  ( 4 min )

Am 30. Juni 2022 findet der nächste POD statt. Die vierte Auflage des Online-Events dreht sich um Scrum, Product Leadership, Moderationsskills und Streitkultur.  ( 4 min )

Dominique und Oliver Winter erläutern in dieser Folge des Produktwerker-Podcast, warum Magic Estimation für Product Owner extrem hilfreich sein kann.  ( 2 min )

Eine an die Öffentlichkeit gelangte Datenbank zu Bestellungen bei einem russischen Lieferdienst zeigt einmal mehr, wie viel die Daten verraten können.  ( 4 min )

Bei Snapchat lassen sich Youtube-Videos neuerdings als Sticker versenden. Die Funktion ist sowohl unter Android als auch unter iOS verfügbar.  ( 3 min )

Künftig stehen russischen Nutzern keine Unwetterwarnungen mehr zur Verfügung, da die Kooperation mit einem staatlichen Institut eingestellt wurde.  ( 4 min )

Die openSUSE-Entwickler arbeiten derzeit an einem neuen Installationsassistenten. Eine sehr frühe Version des D-Installers lässt sich jetzt ausprobieren.  ( 4 min )

Die populäre Mac-App kommt mit einem überarbeiteten Interface und zahlreichen neuen "Blocks" zur Live-Verarbeitung von Audio.  ( 4 min )

Angriffsvektoren in der eigenen Unternehmens-IT mit Hacker-Mitteln aufdecken und beseitigen lernen. Online-Schulung an 2 Tagen, mit 10 Prozent Rabatt bis 21.4.  ( 3 min )

Java-Software-Entwickler und -architekten erhalten handfeste Programmierpraxis zu den diversen JDK-APIs für Parallelität. 10 % Frühbucherrabatt bis 18.4.  ( 3 min )

In den Niederlanden standen am Sonntag plötzlich die meisten Züge still. Ein wichtiger Teil des Verkehrsleitsystems hat verrücktgespielt.  ( 4 min )

The daring Chinese biophysicist who created the world’s first gene-edited children has been set free after three years in a Chinese prison. He Jiankui created shock waves in 2018 with the stunning claim that he’d altered the genetic makeup of IVF embryos and implanted them into a woman’s uterus, leading to the birth of twin…  ( 4 min )

A bleak new report from the UN’s climate panel underscores the price the world is paying for the long delays in addressing global warming despite decades of warnings. Last year, worldwide energy-related carbon dioxide topped 36 billion tons, setting a new record as the global economy sprang back from the depths of the pandemic. As…  ( 5 min )

An Android spyware application has been spotted masquerading as a "Process Manager" service to stealthily siphon sensitive information stored in the infected devices. Interestingly, the app — that has the package name "com.remote.app" — establishes contact with a remote command-and-control server, 82.146.35[.]240, which has been previously identified as infrastructure belonging to the  ( 3 min )

At least three different advanced persistent threat (APT) groups from across the world have launched spear-phishing campaigns in mid-March 2022 using the ongoing Russo-Ukrainian war as a lure to distribute malware and steal sensitive information. The campaigns, undertaken by El Machete, Lyceum, and SideWinder, have targeted a variety of sectors, including energy, financial, and governmental  ( 3 min )

A group of academics from the University of Oxford and Armasuisse S+T has disclosed details of a new attack technique against the popular Combined Charging System (CCS) that could potentially disrupt the ability to charge electric vehicles at scale. Dubbed "Brokenwire," the method interferes with the control communications that transpire between the vehicle and charger to wirelessly abort the  ( 3 min )

A previously undocumented "sophisticated" information-stealing malware named BlackGuard is being advertised for sale on Russian underground forums for a monthly subscription of $200. "BlackGuard has the capability to steal all types of information related to Crypto wallets, VPN, Messengers, FTP credentials, saved browser credentials, and email clients," Zscaler ThreatLabz researchers Mitesh Wani  ( 3 min )

A variant of the Mirai botnet called Beastmode has been observed adopting newly disclosed vulnerabilities in TOTOLINK routers between February and March 2022 to infect unpatched devices and expand its reach potentially. "The Beastmode (aka B3astmode) Mirai-based DDoS campaign has aggressively updated its arsenal of exploits," Fortinet's FortiGuard Labs Research team said. "Five new exploits were  ( 3 min )

Ever wondered how to build a paginated list that works with and without JavaScript? In this article, Manuel explains how you can leverage the power of Progressive Enhancement and do just that with Eleventy and Alpine.js.  ( 15 min )

A compromised Trezor hardware wallet mailing list was used to send fake data breach notifications to steal cryptocurrency wallets and the assets stored within them. [...]  ( 5 min )

A new remote access trojan (RAT) named Borat has appeared on darknet markets, offering easy-to-use features to conduct DDoS attacks, UAC bypass, and ransomware deployment. [...]  ( 4 min )

Für Version 2.0 der TI zur Digitalisierung des Gesundheitswesens fordern Experten eine höhere Nutzerfreundlichkeit, ein Migrationskonzept und eine Testumgebung.  ( 5 min )

Bundesinnenministerin Nancy Faeser (SPD) rüstet angesichts des Ukraine-Kriegs für digitale Gegenschläge. Die Ampel-Koalition ist an sich gegen Hackbacks.  ( 5 min )

Plus: Improving Google Search and open-source software library for more natural computer speech In brief  AI algorithms crushed eight world champions playing the card game Bridge, marking another milestone in machine learning systems becoming better than humans at specific games.…  ( 8 min )

Viasat und SentinelOne haben Details zum Cyberangriff auf KA-Sat veröffentlicht, der hierzulande Windräder lahmlegte. Sie sehen eine Botnetz-Verbindung.  ( 5 min )

Das Team der Linux-Distribution Elementary OS trennt sich. Gründerin Danielle Foré bleibt als Einzige an Bord und plant, den Fokus des Projektes zu ändern.  ( 4 min )

Cyberangreifer russischer Geheimdienste sollen die IT des ungarischen Außenministeriums unterwandert haben. Auch Nato- und EU-Dokumente seien abgeflossen.  ( 5 min )

Heute in c't uplink sprechen wir über Datenschutz bei Android: Einstellungen optimieren, Bloatware entfernen, Custom-ROMs installieren.  ( 4 min )

Plus: Hive hits health-care org, law enforcement ransomware response is lacking, and orgs can't meet new disclosure rules In Brief  Cybercriminals have used fake emergency data requests (EDRs) to steal sensitive customer data from service providers and social media firms. At least one report suggests Apple, and Facebook's parent company Meta, were victims of this fraud.…  ( 11 min )

When does this thing get to unionize? Robotics company Boston Dynamics is making one of its latest robots more generally commercially available: a mobile, autonomous arm called Stretch.…  ( 7 min )

If it can cut energy requirements for both, this idea might not stink after all Tomorrow Water, a subsidiary of Korean firm BKT, is aiming to make datacenters more environmentally friendly by colocating them with sewage treatment plants, an arrangement it claims can save both energy and water.…  ( 7 min )

It's a bug's life Video  After some careful study, it turns out the brain of an insect is pretty good at separating signal from noise.…  ( 8 min )

If decision is upheld, this 'could seriously harm FOSS and copyleft' A US federal district court decision in California favoring database biz Neoj4 is incorrect and imperils free open-source software, according to the Software Freedom Conservancy.…  ( 10 min )

White House chimes in: Folks 'in every state must have a free and fair choice' to unionize Amazon warehouse workers in New York City voted in favor of joining a trade union on Friday, marking the first-ever successful union campaign against the tech giant in its history.…  ( 8 min )

Two teenagers from the UK charged with helping the Lapsus$ extortion gang have been released on bail after appearing in the Highbury Corner Magistrates Court court on Friday morning. [...]  ( 3 min )

Yesterday, American Express users across the world including US, UK, and Europe, experienced widespread outages lasting hours, and some users continue to. BleepingComputer was able to briefly reproduce issues right before Amex confirmed partially restoring services. [...]  ( 4 min )

Yesterday, American Express users across the world including US, UK, and Europe, experienced widespread outages lasting hours, and some users continue to. BleepingComputer was able to briefly reproduce issues right before Amex confirmed partially restoring services. [...]  ( 4 min )

While ransomware is still conducting attacks and all companies must stay alert, ransomware news has been relatively slow this week. However, there were still some interesting stories that we outline below. [...]  ( 4 min )

A 15-year-old security vulnerability has been disclosed in the PEAR PHP repository that could permit an attacker to carry out a supply chain attack, including obtaining unauthorized access to publish rogue packages and execute arbitrary code. "An attacker exploiting the first one could take over any developer account and publish malicious releases, while the second bug would allow the attacker  ( 3 min )

The City of London Police on Friday disclosed that it has charged two of the seven teenagers, a 16-year-old and a 17-year-old, who were arrested last week for their alleged connections to the LAPSUS$ data extortion gang. "Both teenagers have been charged with: three counts of unauthorized access to a computer with intent to impair the reliability of data; one count of fraud by false  ( 3 min )

DevOps platform GitLab has released software updates to address a critical security vulnerability that, if potentially exploited, could permit an adversary to seize control of accounts. Tracked as CVE-2022-1162, the issue has a CVSS score of 9.1 and is said to have been discovered internally by the GitLab team. "A hardcoded password was set for accounts registered using an  ( 3 min )

Microsoft now allows enterprise admins to re-enable the MSIX ms-appinstaller protocol handler disabled after Emotet abused it to deliver malicious Windows App Installer packages. [...]  ( 4 min )

A previously unknown Android malware uses the same shared-hosting infrastructure previously seen used by the Russian APT group known as Turla, though attribution to the hacking group not possible. [...]  ( 4 min )

A previously unknown Android malware has been linked to the Turla hacking group after discovering the app used infrastructure previously attributed to the threat actors. [...]  ( 4 min )

A Mirai-based distributed denial-of-service (DDoS) botnet tracked as Beastmode (aka B3astmode) has updated its list of exploits to include several new ones, three of them targeting various models of Totolink routers. [...]  ( 4 min )

Japanese cybersecurity software firm Trend Micro has patched a high severity security flaw in the Apex Central product management console that can let attackers execute arbitrary code remotely. [...]  ( 3 min )

GitLab has addressed a critical severity vulnerability that could allow remote attackers to take over user accounts using hardcoded passwords. [...]  ( 3 min )

The European Parliament has taken the first steps for new legislation against money-laundering that covers cryptocurrency transactions, which are an important part of illicit activities today. [...]  ( 5 min )

Microsoft has added a new safeguard hold blocking Windows 11 upgrades for Windows 10 customers who don't import their Internet Explorer 11 (IE11) data into Microsoft Edge before trying to install the newest Windows version. [...]  ( 3 min )

Okta's outsourced provider of support services, Sitel (Sykes) has shared more information this week in response to the leaked documents that detailed the various incident response tasks carried out by Sitel after the Lapsus$ hack. [...]  ( 4 min )

Phishing attacks are abusing Microsoft Azure's Static Web Apps service to steal Microsoft, Office 365, Outlook, and OneDrive credentials. [...]  ( 3 min )

Fixed passphrases for OmniAuth users not such a great idea GitLab on Thursday issued security updates for three versions of GitLab Community Edition (CE) and Enterprise Edition (EE) software that address, among other flaws, a critical hard-coded password bug.…  ( 8 min )

Ferroelectric devices key for this qubit-slinging startup A Swiss quantum computing company claiming a world-first discovery has just marked what it believes is one of the largest funding rounds in the history of the quantum tech space.…  ( 8 min )

Open-source HPC suite now includes 100 full-release products The Extreme-scale Scientific Software Stack (E4S) project has released version 22.02 of its collection of software packages for developing, deploying and running scientific applications on high-performance compute (HPC) platforms.…  ( 8 min )

Pretty 'community' version of one of the best-known Linuxes in Middle Kingdom Deepin version 20.5 is the latest "Community" version of one of the best-known Chinese Linux distros, and shows an interesting blend of technological influences.…  ( 10 min )

In the meantime, Windows giant eliminates 'challenged restriction' Microsoft's attempts to have a 2021 lawsuit's claims regarding anti-competitive practices struck out were this week contested in UK courts.…  ( 8 min )

Two teenagers arrested as part of police probe into extortion group British police have charged two teenagers as part of an international investigation into the Lapsus$ cyber extortion gang.…  ( 8 min )

So long as the economy stays healthy, and supply can catch up to demand IDC forecasts that spending on compute and storage systems for cloud infrastructure will grow 21.7 percent this year compared to 2021. Spending on public clouds is also expected to pass that of non-cloud infrastructure in 2022.…  ( 9 min )

Tech’s posterchild of German industrial success must face its failures as it succumbs to midlife angst Feature  Like so many stories in the history of computing, it involves Xerox. Scientific Data Systems was sold by Xerox to IBM as part of a hardware deal. When Big Blue canned a related software project, a group of five German engineers saw an opportunity.…  ( 12 min )

Steering body calls for help to 'identify ISA gaps, build plans for future extensions' The momentum behind RISC-V is growing with the backing of tech heavyweights, but it comes with a challenge: encouraging CPU designers to stay on the same page, and to avoid the sort of fragmentation that happened in MIPS and Android.…  ( 10 min )

We can't have that contractor making us look bad Something for the Weekend  I nearly choked when I read the email. "Your eBay auction has ended. Your NFT has sold for $1 million." That's about $0.999999 million more than I thought it was worth, hence the surprise. Oh, and becoming comfortably well off was a bit of a jolt, I suppose.…  ( 12 min )

Also: Belarusian miscreants pivot to browser-in-the-browser attacks A Russian cybercrime gang has lately sent credential-phishing emails to the military of Eastern European countries and a NATO Center of Excellence, according to a Google threat report this week. …  ( 9 min )

Forrester Research is DeFi-ing current hype Analyst firm Forrester Research has had a look at Web3 – the buzzword describing blockchain-powered decentralized metaverse-y stuff – and decided there's not a lot to like.…  ( 9 min )

Company changed address to avoid probe after sending 378,553 messages Britain's data watchdog has issued an £80,000 penalty to a financial advisor that dispatched hundreds of thousands of unsolicited text messages during lockdown.…  ( 8 min )

Behold the rarest of IT skills: Tact and diplomacy On Call  Being On Call requires certain skills. Technical ability? Sure. A desire to help? Naturally. However, there are some calls where one has to dip into one's reservoirs of diplomacy. Two bytes: good. Loss of face: bad.…  ( 8 min )

And software nasty may have a VPNFilter link, too Tens of thousands of Viasat satellite broadband modems that were disabled in a cyber-attack some weeks ago were wiped by malware with possible links to Russia's destructive VPNFilter, according to SentinelOne.…  ( 11 min )

The deal is a long way from done and players can already foresee rival bids Singapore-based Effissimo Capital Management, the largest shareholder in troubled Japanese tech giant Toshiba, has signed a deal to sell its stake to American private investment firm Bain Capital – if Bain decides to launch a takeover bid.…  ( 8 min )

Managed to send material from his private email address The United States Department of Justice (DoJ) has revealed it has indicted a National Security Agency (NSA) employee for sharing top secret national security information with an unnamed person who worked in the private sector.…  ( 8 min )

Fittings open on Saturday, to make it easier to take motorized pals with you wherever you go Japanese startup Groove X will on Saturday stage fittings for a wearable sling - somewhat akin to baby carriers - designed to let owners of "Love Robots" more easily carry the machines wherever they go.…  ( 8 min )

Public agencies told to stop using overseas apps from 2025 as parallel imports approved, too Russian President Vladimir Putin has banned the purchase of foreign software – be it standalone applications or code shipping in equipment – for significant critical infrastructure projects, with limited exceptions.…  ( 8 min )

Vid-streamer iQIYI also earns a place Chinese search giant and AI cloud company Baidu has landed on the US Securities and Exchange Commission's provisional list of companies it might de-list because of opaque disclosures.…  ( 8 min )

Alphabet AI lab under fire after bosses 'dragged out' probe into abuse A former DeepMind employee has blasted the AI lab for being, in her view, "grossly inadequate" in dealing with internal sexual harassment.…  ( 8 min )

Die Eufy Video Doorbell Dual 2K überwacht den Eingangsbereich gleich mit zwei Kameras. Die App-Steuerung ist tadellos und die Videos werden lokal gespeichert.  ( 7 min )

Gegenwärtig ist das erforderliche hohe Maß an Vertrauen in den russischen Hersteller nicht gewährleistet, hat das Verwaltungsgericht Köln entschieden.  ( 4 min )

Bis einschließlich 9. Mai können sich Developer mit Vorträgen und Workshops für die nächste Ausgabe der Nürnberger Entwicklerkonferenz bewerben.  ( 3 min )

Unsere Übersicht kleiner, aber interessanter Meldungen enthält diese Woche unter anderem Slint, Lucene, GitHub Copilot, Quarkus und CMake.  ( 3 min )

Mehr als 35.500 Schülerinnen und Schülern starten Runde eins des Jugendwettbewerbs Informatik – so viele Kinder wie noch nie.  ( 3 min )

Apple steigt umfassender in den Geschäftskundenmarkt ein, vorerst nur in den USA. Der neue Dienst umfasst Geräteverwaltung, Cloud-Speicher und mehr Support.  ( 4 min )

Über den OLED-Gaming-Monitor AW3423DW wird hitzig diskutiert. c't 3003 klärt im Test, warum.  ( 8 min )

Die neue Version von YugaByteDB soll Entwicklern durch etliche neue Features, darunter die Integration in einige Werkzeuge, die Arbeit spürbar erleichtern.  ( 6 min )

Kann Grafana Doom? Drei Entwickler des Labs stellten sich beim Hackathon im März der Challenge und liefern zum Geburtstag des Spiels die Version "Doomfana".  ( 5 min )

Das Community-Festival präsentiert ein ebenso buntes wie informatives Programm rund um Container, Microservices, DevOps und CI/CD. Jetzt Tickets sichern.  ( 5 min )

Im Rahmen des Wettbewerbs "Grand Challenge der Quantenkommunikation" erhalten Projekte rund um die sichere quantenbasierte Authentifizierung Fördermittel.  ( 4 min )

Für Qt 5.15 verlängert die Qt Company den Support um zwei Jahre, allerdings nur für Abokunden oder über einen gesondert gebuchten Extended Support.  ( 4 min )

Dieses Jahr erscheinen die ersten GPUs mit HBM3-DRAM – SK Hynix gibt aber auch schon einen Ausblick auf die Nachfolgergeneration bis zum Jahr 2028+.  ( 4 min )

Die Gitlab-Entwickler haben ein Update veröffentlicht, um Sicherheitslücken zu schließen. Eine kritische Lücke könnte Angreifern die Kontoübernahme ermöglichen.  ( 4 min )

Neue Verschlüsselungsverfahren widerstehen auch Quantencomputern. Im Workshop lernen Softwareentwickler die nötige Theorie und bekommen Tipps für die Praxis.  ( 3 min )

In Rockwell Automation Logix-Kontrollern können Angreifer Sicherheitslücken ausnutzen, um eigenen Code auszuführen. Die CISA gibt Admins Handlungsempfehlungen.  ( 4 min )

Wie wird man eigentlich der eigene Chef? Drei ganz konkrete Tipps für Leute, die ihre Arbeitsweise und Projekte gerne selbstständig in die Hand nehmen wollen.  ( 4 min )

Am 1. April 1972 gründeten einige Ex-IBMler in der kurpfälzischen Provinz das derzeit einzige deutsche Softwarehaus von Weltrang: SAP.  ( 10 min )

Das Bundesgesundheitsministerium hat gegenüber der Kassenärztlichen Bundesvereinigung bestätigt: Praxen tragen keine Schuld für Konnektoren.  ( 4 min )

Angreifer könnten im Smarthome aufgrund einer Sicherheitslücke in RaspberryMatic die Kontrolle übernehmen. Ein Update zum Absichern steht zur Verfügung.  ( 3 min )

Unter Verwendung von Systemroutinen war es möglich, Apples zentralen Account abzufischen. Der Konzern reagierte nur mit Verzögerung.  ( 4 min )

Die Betriebssystem-Updates sollen Bugs beseitigen, die iPhone- und Mac-Nutzer geplagt haben. Sicherheitslücken werden offenbar aktiv für Angriffe ausgenutzt.  ( 4 min )

The cyberattack aimed at Viasat that temporarily knocked KA-SAT modems offline on February 24, 2022, the same day Russian military forces invaded Ukraine, is believed to have been the consequence of wiper malware, according to the latest research from SentinelOne. The findings come as the U.S. telecom company disclosed that it was the target of a multifaceted and deliberate" cyberattack against  ( 3 min )

Two new security vulnerabilities have been disclosed in Rockwell Automation's programmable logic controllers (PLCs) and engineering workstation software that could be exploited by an attacker to inject malicious code on affected systems and stealthily modify automation processes. The flaws have the potential to disrupt industrial operations and cause physical damage to factories in a manner  ( 3 min )

Threat actor groups like Wizard Spider and Sandworm have been wreaking havoc over the past few years – developing and deploying cybercrime tools like Conti, Trickbot, and Ryuk ransomware. Most recently, Sandworm (suspected to be a Russian cyber-military unit) unleashed cyberattacks against Ukranian infrastructure targets. To ensure cybersecurity providers are battle ready, MITRE Engenuity uses  ( 4 min )

A Chinese advanced persistent threat tracked as Deep Panda has been observed exploiting the Log4Shell vulnerability in VMware Horizon servers to deploy a backdoor and a novel rootkit on infected machines with the goal of stealing sensitive data. "The nature of targeting was opportunistic insofar that multiple infections in several countries and various sectors occurred on the same dates," said  ( 4 min )

The North Korean state-backed hacking crew, otherwise known as the Lazarus Group, has been attributed to yet another financially motivated campaign that leverages a trojanized decentralized finance (DeFi) wallet app to distribute a fully-featured backdoor onto compromised Windows systems. The app, which is equipped with functionalities to save and manage a cryptocurrency wallet, is also designed  ( 3 min )

Networking equipment maker Zyxel has pushed security updates for a critical vulnerability affecting some of its business firewall and VPN products that could enable an attacker to take control of the devices. "An authentication bypass vulnerability caused by the lack of a proper access control mechanism has been found in the CGI program of some firewall versions," the company said in an advisory  ( 3 min )

Apple on Thursday rolled out emergency patches to address two zero-day flaws in its mobile and desktop operating systems that it said may have been exploited in the wild. The shortcomings have been fixed as part of updates to iOS and iPadOS 15.4.1, macOS Monterey 12.3.1, tvOS 15.4.1, and watchOS 8.5.1. Both the vulnerabilities have been reported to Apple anonymously. Tracked as CVE-2022-22675,  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Droughts are cutting into California’s hydropower. Here’s what that means for clean energy. The droughts that swept across the western US in 2021 sparked wildfires and damaged crops. But the historic lack of…  ( 4 min )

The droughts that swept across the western US in 2021 sparked wildfires and damaged crops. But the historic lack of water also had an impact on one of California’s key sources of renewable energy: hydropower. Electricity generation from California hydropower plants was down 48% from the 10-year average, according to new data from the Energy…  ( 3 min )

Die Gitlab-Entwickler haben ein Update veröffentlicht, um Sicherheitslücken zu schließen. Eine kritische Lücke könnte Angreifern die Kontoübernahme ermöglichen.  ( 4 min )

In Rockwell Automation Logix-Kontrollern können Angreifer Sicherheitslücken ausnutzen, um eigenen Code auszuführen. Die CISA gibt Admins Handlungsempfehlungen.  ( 4 min )

Angreifer könnten im Smarthome aufgrund einer Sicherheitslücke in RaspberryMatic die Kontrolle übernehmen. Ein Update zum Absichern steht zur Verfügung.  ( 3 min )

Die Betriebssystem-Updates sollen Bugs beseitigen, die iPhone- und Mac-Nutzer geplagt haben. Sicherheitslücken werden offenbar aktiv für Angriffe ausgenutzt.  ( 4 min )

Next.js’ recent 12.0 release included a new beta feature: middleware. For a detailed explanation, you can read all about it in Sam’s previous article, “[Next.js Wildcard Subdomains](https://www.smashingmagazine.com/2021/11/nextjs-wildcard-subdomains/)”. This article, on the other hand, dives into the overall concept of middleware and how handy it can be in building things.  ( 6 min )

Nothing like a little kernel-level memory snooping, code execution Apple has released updates for its mobile and desktop operating systems to patch security holes that may well have been exploited in the wild.…  ( 7 min )

Uni trio probe efforts by miners to max out rewards at expense of others UC Berkeley boffins have found that strategies for squeezing extra profit out of Ethereum transactions come at the cost of other cryptocurrency investors and threaten the security and stability of the entire Ethereum ecosystem.…  ( 10 min )

Troubled container company may escape confines of its doldrums Docker hasn't just got back in the fight thanks to its latest round of funding: it's earned double-unicorn status, too. …  ( 7 min )

Lead dev of modest ground-up Unix-like OS quits job to work on it SerenityOS, which started out as a one-man project in 2018, has now got to the point where its creator proudly announced that its web browser passes the Acid3 browser test.…  ( 8 min )

Backers include SK Lubricants as dielectric fluid research partner An enterprise immersion cooling company has received a $28 million investment it plans to use to sink itself into additional customer datacenters.…  ( 8 min )

Will provide tips on spotting bad info, frontload highly cited sources Further embracing its unspoken role as arbiter of truth, Google has unrolled some new search result features to help users "sort out what information is credible and what isn't."…  ( 8 min )

You didn't have any plans for the weekend anyway, did you? Another Java Remote Code Execution vulnerability has reared its head, this time in the popular Spring Framework and, goodness, it's a nasty one.…  ( 9 min )

Chip giant wants to compete in software while playing catch-up in silicon Intel hopes to gain an extra edge in the cloud and datacenter markets with the acquisition of Granulate, a developer of software that optimizes complex and old workloads for modern CPUs.…  ( 9 min )

RPA vendor's recurring revenue for 2023 will be down by $15m after pausing Russia operations UiPath's CEO has said the war in Ukraine is "having a profound impact" on business confidence in Europe and the UK.…  ( 8 min )

Reverse engineering yields sticky microarchitectural vulnerabilities Nvidia's ultra-dense GPU-driven AI training and inference systems are prone to covert and side channel attacks, according to research just published from a team led by Pacific Northwest National Laboratory (PNNL). This might be less concerning for those with on-prem DGX systems, but for cloud vendors selling time on the AI training boxes, the vulnerabilities are worth noting.…  ( 9 min )

Confused? Don’t be – Intel flagged this when it married Evo and vPro a while back Dell has refreshed its business laptops, predictably enough adding 12th-gen Intel silicon while also trying to make its offerings in a very well established product category stand out.…  ( 8 min )

Uses 64-node cluster of classical HPC boxen to prove it Fujitsu says it has developed the world's fastest quantum simulator capable of handling 36 qubit quantum circuits. The firm will use this to speed development of quantum applications, and said it is already planning a further simulator capable of handling more qubits.…  ( 8 min )

Windows 10 still rules the roost among Microsoft fans, according to AdDuplex The growth of Microsoft's flagship operating system, Windows 11, appears to be slowing if figures from AdDuplex are to be believed.…  ( 8 min )

GNOME 42 and some other small changes for both... though we still miss Unity Late April should see the release of the 36th versions of two of the biggest Linux distros: Fedora 36 and Ubuntu 22.04.…  ( 10 min )

'We have this small moment in time where we can make improvements in our defensive posture' The US and its NATO allies should expect a "long tail of retaliation," in the form of cyberattacks, for the sanctions imposed on Russia, says cloud security shop ExtraHop's CEO Patrick Dennis.…  ( 10 min )

Questions linger over Technology Sourcing Programme after 2nd supplier in a week awarded significant extensions for historic contract UK tax authority HMRC has awarded Fujitsu a £250m contract for managed desktop services (MDS), extending a deal that dates back to 2017.…  ( 8 min )

Hosting platforms required to report content creators' names and income to stymie tax dodges China's massive live-streaming industry is the next target of Beijing's tech regulation blitz, with three government agencies announcing a requirement for operators to register in an attempt to eliminate tax evasion.…  ( 8 min )

Architecture may make it possible to train one machine-learning model that performs all sorts of tasks Google says it is developing an AI architecture that can be used to train one giant system capable of performing multiple different tasks more efficiently than today's models.…  ( 9 min )

Your cloudy server will not self-destruct – even if the hardware it runs on does Amazon Web Services has added a small but important resilience feature: instances in its Elastic Computing Cloud (EC2) now include automatic recovery by default.…  ( 8 min )

Oh look, someone else who thinks on-prem is old hat Cryptocurrency mining groups that typically have targeted on-premises servers are now competing fiercely for servers in the cloud.…  ( 10 min )

Foundry giant's staff could be sleeping at work during new COVID lockdown Chipmaking giant TSMC says China's COVID lockdowns slowed PC and smartphone demand, but given the Taiwanese outfit already struggles to meet demand, company chair Mark Liu was unfussed by the dip.…  ( 8 min )

Speech also alleges Russian troops in Ukraine have mutinied, shot down own plane The director of UK intelligence agency Government Communications Headquarters (GCHQ), Sir Jeremy Fleming, has warned that China is trying to introduce "undemocratic values as the default for vast swathes of future tech and the standards that govern it."…  ( 10 min )

Think tank fears future studies of this sort may be harder as social networks withdraw data Russia, Iran and Saudi Arabia are the top three proliferators of state-linked Twitter misinformation campaigns, according to a report released Wednesday by the Australian Strategic Policy Institute (ASPI).…  ( 9 min )

Better late than never – all its global and Chinese hyperscale rivals are already there Alibaba Cloud has opened its first datacenter in South Korea.…  ( 8 min )

Ill-gotten gains bankrolled swish life of flash cars and real estate A now-former finance director stole tablet computers and other equipment worth $40 million from the Yale University School of Medicine, and resold them for a profit.…  ( 8 min )

Slap-a-teacher and smash-the-school crazes were carefully engineered smears, it is claimed Facebook parent Meta, which has been struggling to compete against TikTok, has reportedly been paying a Republican-oriented consulting firm to encourage negative media reports about the Chinese-owned rival.…  ( 10 min )

Better late than never The widely used Zlib data-compression library finally has a patch to close a vulnerability that could be exploited to crash applications and services — four years after the vulnerability was first discovered but effectively left unfixed.…  ( 9 min )

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal civilian agencies on Thursday to patch a critical Sophos firewall bug and seven other vulnerabilities within the next three weeks, all exploited in ongoing attacks. [...]  ( 3 min )

A new information-stealing malware named BlackGuard is winning the attention of the cybercrime community, now sold on numerous darknet markets and forums for a lifetime price of $700 or a subscription of $200 per month. [...]  ( 5 min )

Network equipment company Zyxel has updated the firmware of several of its business-grade firewall and VPN products to address a critical-severity vulnerability that could give attackers administrator-level access to affected devices. [...]  ( 3 min )

Apple has released security updates on Thursday to address two zero-day vulnerabilities exploited by attackers to hack iPhones, iPads, and Macs. [...]  ( 3 min )

A newly discovered data wiper malware that wipes routers and modems has been deployed in the cyberattack that targeted the KA-SAT satellite broadband service to wipe SATCOM modems on February 24, affecting thousands in Ukraine and tens of thousands more across Europe. [...]  ( 5 min )

A newly discovered data wiper malware that wipes routers and modems has been loosely linked to the cyberattack that targeted the KA-SAT satellite broadband service on February 24, affecting thousands in Ukraine and tens of thousands across Europe. [...]  ( 4 min )

The Chinese APT group known as Deep Panda has been spotted in a recent campaign targeting VMware Horizon servers with the Log4Shell exploit to deploy a novel rootkit named 'Fire Chili'. [...]  ( 4 min )

Spring released emergency updates to fix the 'Spring4Shell' zero-day remote code execution vulnerability, which leaked prematurely online before a patch was released. [...]  ( 3 min )

Curiosity and a love of learning are definite advantages in the cybersecurity field, and reading and learning more about the subject is just a few clicks away. The world needs more people out there fighting cybercrime. Perhaps one of them could be you. [...]  ( 5 min )

Atento has published its 2021 financial performance results, which have a massive $42.1 million dent from a ransomware attack the firm suffered in October 2021. [...]  ( 3 min )

EXCLUSIVE: A bug in the support dashboard of Palo Alto Networks (PAN) exposed thousands of customer support tickets to an unauthorized individual, BleepingComputer has learned. The exposed information included, customer names, contact information, conversations between staff and customers, firewall logs and configuration dumps. [...]  ( 4 min )

Hackers associated with the North Korean government have been distributing a trojanized version of the DeFi Wallet for storing cryptocurrency assets to gain access to the systems of cryptocurrency users and investors. [...]  ( 4 min )

Phishing actors are actively abusing Calendly to kick off a clever sequence to trick targets into entering their email account credentials on the phishing page. [...]  ( 4 min )

Reseller wie Timmunity und Alternate haben Sicherheitssoftware des russischen Produzenten aus dem Programm genommen oder gekündigt. Andere halten zu Kaspersky.  ( 5 min )

Besprechungen direkt in Docs, Bild-im-Bild-Modus für Meet, übersichtlichere Diskussionen in Spaces – Google erweitert sein Cloud-Office Workspace deutlich.  ( 4 min )

Durch Zugriff auf Mail-Adressen von Strafverfolgern konnten Hacker offenbar Nutzerdaten bei Diensten abfragen. In Notfällen werden Daten schnell herausgegeben.  ( 4 min )

Nur 1,5 Jahre hat das chinesische Start-up Moore Threads benötigt, um eigene Grafikkarten herzustellen. Zu den Geldgebern gehören chinesische Tech-Riesen.  ( 4 min )

Die GParted-Entwickler haben ihr minimalistisches Linux-System GParted Live mit ihrer Partitionsverwaltungssoftware auf den neuen Stand 1.4.0 gebracht.  ( 3 min )

Auf Druck von Regulierern erlaubt Apple sogenannten "Reader"-Apps das Setzen eines einzelnen externen Links zur Account-Verwaltung. Die Auflagen sind strikt.  ( 4 min )

Das Spring-Entwicklerteam stellt Patches für zwei Sicherheitslücken zur Verfügung. Daneben droht jedoch mit Spring4Shell eine weitere Gefahr.  ( 5 min )

Die neuen Werbetechniken sollen zuerst von Beta-Testern erprobt werden. Den Geltungsbereich der Datenschutzgrundverordnung scheut Google jedoch noch.  ( 4 min )

heise Developer präsentiert software-architektur.tv, Eberhard Wolffs Videocast. Weiter geht es mit dem Bau einer Architektur. Im Fokus: Benutzerfreundlichkeit.  ( 3 min )

Der renommierte Journalist und IT-Sicherheitsexperte Brian Krebs wurde vom Hersteller Ubiquiti für seine angeblich falsche Berichterstattung verklagt.  ( 5 min )

Die zweitägige Schulung bereitet Sie auf Prüfungen im Rahmen der Umsetzung des § 8a (3) des BSI-Gesetzes vor. 10 Prozent Frühbucherrabatt bis 18.4.  ( 3 min )

Arbeitgeber sind zukünftig zur Arbeitszeiterfassung verpflichtet. Software-Lösungen hierfür existieren viele – rechtliche Besonderheiten auch.  ( 14 min )

Die Plattform der ehemaligen Betreiber von Gurock Software erweitert zum Start der öffentlichen Testphase die Anbindung an Issue-Tracking-Systeme.  ( 4 min )

In zwei Tagen gut vorbereitet auf die Prüfung und Zertifizierung Ihrer IT-Produkte nach deutschen und europäischen Standards wie CC, BSZ und NESAS.  ( 3 min )

Dagger setzt auf ein Modulsystem für den Continuous-Integration-Prozess. Das Projekt erhält als Starthilfe eine Finanzspritze von 20 Millionen US-Dollar.  ( 4 min )

Sarah Hoffmann, Klassenlehrerin an einer Münchner Mittelschule, über ihre Erfahrungen mit den Experience Packages des Skills for Innovation-Programms von Intel.  ( 7 min )

Der mit einer Million US-Dollar dotierte "Nobelpreis für Informatik" geht an Jack Dongarra, der seit 50 Jahren an Algorithmen für Supercomputer forscht.  ( 3 min )

Basierend auf Unikernels lassen sich mit MirageOS schlanke und potente Abbilder für virtuelle Instanzen schaffen. Version 4 bietet einige Neuerungen.  ( 5 min )

Der mit dem A13-SoC ausgestattete Bildschirm verfügt über ein ausgefeiltes Innenleben, wie eine Zerlegung durch IFixIt zeigt.  ( 4 min )

Das Online-Event am 7. April liefert einschlägiges GitOps-Know-how – vom Bereitstellen der Infrastructure-as-Code bis zum automatisierten Software-Deployment.  ( 4 min )

Die Linux-Distribution Rolling Rhino Remix liefert ein Ubuntu-System, das sich immer auf dem neuesten Stand hält – aber nicht für jeden geeignet ist.  ( 4 min )

An fünf Terminen im April und Mai können sich Admins in 20 praxisnahen Stunden zu den wichtigsten Themen rund um Microsoft 365 weiterbilden.  ( 4 min )

Seit die EU ihren Gesetzesarm bis zu den DNS-Root-Servern in den USA ausstreckte, befürchten die Betreiber staatliche Einmischung, die das Internet beschneiden.  ( 7 min )

In Berlin bekräftigten Vertreter von Bund, Ländern und Wirtschaft, künftig Verwaltungstechnik gemeinsam zu gestalten. Neue Chancen für die Tech-Szene?  ( 5 min )

The maintainers of Spring Framework have released an emergency patch to address a newly disclosed remote code execution flaw that, if successfully exploited, could allow an unauthenticated attacker to take control of a targeted system. Tracked as CVE-2022-22965, the high-severity flaw impacts Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19, and other older, unsupported versions. Users  ( 3 min )

Three security vulnerabilities have been disclosed in the popular Wyze Cam devices that grant malicious actors to execute arbitrary code and access camera feeds as well as unauthorizedly read the SD cards, the latter of which remained unresolved for nearly three years after the initial discovery. The security flaws relate to an authentication bypass (CVE-2019-9564), a remote code execution bug  ( 3 min )

Researchers have disclosed what they say is the first-ever Python-based ransomware strain specifically designed to target exposed Jupyter notebooks, a web-based interactive computing platform that allows editing and running programs via a browser. "The attackers gained initial access via misconfigured environments, then ran a ransomware script that encrypts every file on a given path on the  ( 3 min )

A Belarusian threat actor known as Ghostwriter (aka UNC1151) has been spotted leveraging the recently disclosed browser-in-the-browser (BitB) technique as part of their credential phishing campaigns exploiting the ongoing Russo-Ukrainian conflict. The method, which masquerades as a legitimate domain by simulating a browser window within the browser, makes it possible to mount convincing social  ( 4 min )

A zero-day remote code execution (RCE) vulnerability has come to light in the Spring framework shortly after a Chinese security researcher briefly leaked a proof-of-concept (PoC) exploit on GitHub before deleting their account. According to cybersecurity firm Praetorian, the unpatched flaw impacts Spring Core on Java Development Kit (JDK) versions 9 and later and is a bypass for another  ( 3 min )

Taiwanese company QNAP this week revealed that a selected number of its network-attached storage (NAS) appliances are affected by a recently-disclosed bug in the open-source OpenSSL cryptographic library. "An infinite loop vulnerability in OpenSSL has been reported to affect certain QNAP NAS," the company said in an advisory published on March 29, 2022. "If exploited, the vulnerability allows  ( 3 min )

Das Spring-Entwicklerteam stellt Patches für zwei Sicherheitslücken zur Verfügung. Daneben droht jedoch mit Spring4Shell eine weitere Gefahr.  ( 5 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. This startup wants to kick-start a molecular electronics revival In 2000, many hoped molecular electronics (using single molecules to create circuits and components) would leapfrog silicon-based circuitry to allow computer chips to keep…  ( 4 min )

In 1999, Rice University chemist Jim Tour co-founded Molecular Electronics Corporation, a company that aimed to use single molecules to make a new type of electronic memory. But Tour had even bigger dreams. In a 2000 story in Wired, he foretold a future in which molecular electronics would leapfrog silicon-based circuitry, allowing computer chips to…  ( 5 min )

Let’s welcome the new month with some new wallpapers. Designed with love by artists and designers from across the globe, they are available in versions with and without a calendar for April 2022.  ( 7 min )

In memo seen by The Register, chip giant seems to be striving for championship yoga-levels of flexibility Intel is going to tell more of its staff to return to their campus desks after many have been working from home or working in the office occasionally, judging by an internal memo sent to employees on Tuesday.…  ( 8 min )

Now for lawmakers to wrangle over the fine print The US Senate this week passed the America COMPETES Act by a bipartisan 68-28 vote, moving more than $50 billion in semiconductor industry funding closer to President Biden's desk. …  ( 8 min )

Network equipment maker insists it acted responsibly following intrusion Network equipment maker Ubiquiti on Tuesday filed a lawsuit against infosec journalist Brian Krebs, alleging he defamed the company by falsely accusing the firm of covering up a cyber-attack.…  ( 8 min )

Lower-end of the family to roll out first – and desktops will have to wait Intel hopes to compete against Nvidia and AMD in the discrete GPU market with now-launched standalone graphics chips for laptops. These components are said to feature a slew of technologies designed to provide smoother gaming experiences and faster content-creation performance.…  ( 12 min )

Open Infrastructure Foundation boasts of growth, but observers note this is mostly existing users scaling up OpenStack's 25th release brings the usual crop of new features to the open-source cloud platform, including support for DPUs, better integration with Prometheus and Kubernetes, and a handy un-delete feature for file system shares.…  ( 8 min )

A misconfigured VPN appliance is to blame It turns out the only thing Russian forces needed to knock thousands of Ukrainian satellite broadband customers offline was a misconfigured VPN.…  ( 7 min )

Mission launched during a pandemic, returned during... oh God, what now? NASA astronaut Mark Vande Hei returned to Earth today aboard a Russian Soyuz capsule and accompanied by two Russian cosmonauts.…  ( 7 min )

Miscreants deployed cryptominers, backdoors since late December, Sophos says VMware's Horizon virtualization platform has become an ongoing target of attackers exploiting the high-profile Log4j flaw to install backdoors and cryptomining malware.…  ( 9 min )

Still can't say goodbye to the legacy browser? Some cookie and COM functionality has been restored Still got that one weird corporate app that simply must use Internet Explorer? Microsoft has tweaked IE mode in its Edge browser to lure the last holdouts.…  ( 7 min )

Claim NashStore will help Russians access common apps from May 9 A group of Russian developers are planning a Google Play alternative for Android users that will give those based in the country access to paid apps and services lost due to sanctions. …  ( 7 min )

Plus: It's looking for more Metaverse engineers in Canada Meta's plans to build a 166-hectare datacenter in the Netherlands' central Flevoland province have been put on hold.…  ( 8 min )

Konica Minolta maintenance system to be installed across 10 national support companies Swedish ERP and business application provider IFS has signed global contracts with Japanese businesses Konica Minolta and Japan Airlines.…  ( 7 min )

Post Nvidia deal collapse, Intel expressed similar interest back in February SK Hynix is reportedly considering forming a consortium to acquire UK chip designer Arm, however, the idea is said to be at a very early stage of planning, and Hynix may not actually proceed with the move.…  ( 8 min )

Cloud and data centre provider's liquidity hit by pandemic, energy costs, intransigent landlords The British division of global cloud and data centre services provider Sungard Availability Services was forced into administration amid a hike in energy bills and after failing to renegotiate landlord rental rates.…  ( 8 min )

No EVs were damaged in the making of this report Researchers from the University of Oxford published details of a vulnerability in the Combined Charging System that has the potential to abort charging.…  ( 7 min )

Non-destructively expand or shrink disk partitions while they still contain data GNOME Partition Editor version 1.4 was released this week by lead maintainer Curtis Gedak.…  ( 8 min )

Gender pay gap narrows, but the US remains top of pay-packet pops Puppet has emitted its seventh annual DevOps salary report, and there is good news: the gender wage gap appears to be narrowing.…  ( 8 min )

UK and Ireland survey reveals difficulties with housekeeping The majority of UK and Ireland SAP users are finding a lack of preparedness in data management is affecting migrations from SAP ECC 6.0 to SAP S/4HANA and/or a push towards automating business processes.…  ( 8 min )

Rejects offer of flat rate payrise, calling offer a 'relative pay cut' due to inflation BT's largest union is rejecting the offer of a flat rate pay rise and threatening to start laying the groundwork for national "statutory industrial ballot action" to ratchet up the pressure on the telecoms biz.…  ( 9 min )

Multi-cloud deal 'is going to take us a little bit longer than we thought,' says CIO The United States Department of Defense has delayed awarding a contract for its massive cloud project – known as the Joint Warfighting Cloud Capability (JWCC) – until December.…  ( 8 min )

Suggests it's prudent to plan for Putin weaponizing Russian products The UK's National Cyber Security Centre (NCSC) has advised users of Russian technology products to reassess the risks it presents.…  ( 8 min )

Meanwhile, Okta squirms as further details of slow hack response emerge Extortion gang Lapsus$ may to be back at work, despite the arrest of seven alleged operatives.…  ( 9 min )

Users of Redmond's two older cloudy CDNs told that the only route to future upgrades is migration Microsoft has created a new version of its Azure Front Door content delivery network (CDN), and told users of its existing two cloudy CDNs that if they want updates the way to get them is migrating to the new product.…  ( 8 min )

Project is a M*A*S*H-up of machine learning and battlefield decision-making A new DARPA initiative aims to ultimately give AI systems the same complex, rapid decision-making capabilities as military medical staff and trauma surgeons who are in the field of battle.…  ( 9 min )

Program co-lead tells us 'energy efficiency is the greatest need' Big names in tech are collaborating with academics to develop energy-optimized machine-learning and quantum-computing systems under the MIT AI Hardware Program, an initiative announced on Tuesday. …  ( 8 min )

SQL injection, race condition, bad cryptographic check pave way for infrastructure network takeovers SentinelOne this week detailed a handful of bugs, including two critical remote code execution vulnerabilities, it found in Microsoft Azure Defender for IoT.…  ( 10 min )

SQL injection, race condition, bad cryptographic check pave way for infrastructure network takeovers SentinelOne this week detailed a handful of bugs, including two critical remote code execution vulnerabilities, it found in Microsoft Azure Defender for IoT.…  ( 10 min )

US watchdog may do something about so-called blank-check IPO capers The US Securities and Exchange Commission is said to be preparing to adopt rules that would make those overseeing special purpose acquisition companies (SPACs) liable for financial exaggerations to investors.…  ( 8 min )

Other manufacturers may follow after import duties passed onto gamers, enthusiasts The US government's lifting of import tariffs on graphics cards from China has already led to a drop in some prices in America.…  ( 9 min )

Symantec team warns ransomware and spying could be next Internet fiends are using a relatively new piece of a malicious code dubbed Verblecon to install cryptominers on infected computers. …  ( 9 min )

US President Joe Biden today has extended the state of national emergency declared to deal with increasingly prevalent and severe malicious cyber threats to the United States national security, foreign policy, and economy. [...]  ( 3 min )

A new zero-day vulnerability in the Spring Core Java framework called 'Spring4Shell' has been publicly disclosed, allowing unauthenticated remote code execution on applications. [...]  ( 4 min )

IT and software consultancy firm Globant has confirmed that they were breached by the Lapsus$ data extortion group, where data consisting of administrator credentials and source code was leaked by the threat actors. [...]  ( 4 min )

The Google Threat Analysis Group (TAG) says more and more threat actors are now using Russia's war in Ukraine to target Eastern European and NATO countries, including Ukraine, in phishing and malware attacks. [...]  ( 3 min )

The Google Threat Analysis Group (TAG) says more and more threat actors are now using Russia's war in Ukraine to target Eastern European and NATO countries, including Ukraine, in phishing and malware attacks. [...]  ( 3 min )

Taiwan-based network-attached storage (NAS) maker QNAP warned on Tuesday that most of its NAS devices are impacted by a high severity OpenSSL bug disclosed two weeks ago. [...]  ( 4 min )

A coordinated operation conducted by the FBI and its international law enforcement partners has resulted in disrupting business email compromise (BEC) schemes in several countries. [...]  ( 4 min )

Threat analysts have discovered a new obfuscation technique used by the Hive ransomware gang, involving IPv4 addresses and a series of conversions that eventually lead to downloading Cobalt Strike beacons. [...]  ( 4 min )

Automated product security helps teams address automotive security vulnerabilities and bugs before - not after - they land companies in the headlines. [...]  ( 4 min )

US satellite communications provider Viasat has shared an incident report regarding the cyberattack that affected its KA-SAT consumer-oriented satellite broadband service on February 24, the day Russia invaded Ukraine. [...]  ( 4 min )

A new spear phishing campaign is taking place in Russia targeting dissenters with opposing views to those promoted by the state and national media about the war against Ukraine. [...]  ( 4 min )

Von 21 Solarstromspeichern erreichen im Test der HTW Berlin vier PV-Speichersysteme die Bestnote A. Insgesamt arbeiten die Systeme immer effizienter.  ( 6 min )

Eine Studie der britischen Medienaufsichtsbehörde Ofcom zeigt, dass 16 Prozent der Drei- bis Vierjährigen bereits Videos der Kurzvideoplattform Tiktok ansehen.  ( 4 min )

Die schnellsten Intel-GPUs erscheinen als Arc 7. Den Anfang machen allerdings die Arc-3-Modelle A370M und A350M für Notebooks.  ( 5 min )

Apples Monopol über iPhone-App-Vertrieb führt nach Ansicht einer niederländischen Stiftung zu "überhöhten Preisen". Sie droht mit einer Sammelklage.  ( 4 min )

Diese Ausgabe der RedMonk-Statistik verzeichnet Balance und wenig Bewegung – anders als im Vorjahr, wo bei der Frühjahrsausgabe die Karten neu gemischt wurden.  ( 7 min )

Themen auf Twitter sind auch in deutscher Sprache verfügbar. Damit will der Kurznachrichtendienst den Feed mit "relevanten Tweets, Events und Anzeigen" füllen.  ( 3 min )

Mit einem auf hiesige KMUs zugeschnittenen Cloud-Portfolio geht Stackit an den Start. Hinter dem Anbieter steht die Schwarz Gruppe.  ( 3 min )

Die Vorschauversion auf das kommende Windows 11-Update ergänzt eine Schaltfläche, um einfacher einen anderen Webbrowser als Edge zum Systemstandard zu machen.  ( 4 min )

Cyberganoven haben das Konsensverfahren hinter dem derzeit beliebtesten Blockchainspiel Axie Infinity kapern können und dabei fette Beute gemacht.  ( 4 min )

Neue Funktionen spendiert Google seinem Cloud-Office Workspace. Allerdings sollten Administratoren und Nutzer einen Blick auf die Tracking-Einstellungen werfen.  ( 4 min )

Findige Bürger nutzen VPNs und Tor, um Internetsperren zu umgehen. Der folgende Überblick zeigt die Stärken und Schwächen der aktuell beliebtesten Tools.  ( 7 min )

Machen Sie mehr aus Ihren Daten: Mit dem Python Scientific Stack die eigenen Unternehmensdaten analysieren & visualisieren. Mit 10 % Frühbucherrabatt bis 19.4.  ( 3 min )

ASRock verkauft ein Mining-System mit 12 Kombiprozessoren von AMD, die es offenbar aufgrund von Defekten nicht in Sonys PS5 geschafft haben.  ( 4 min )

Eine kürzlich entdeckte Sicherheitslücke in zlib könnte Angreifern ermöglichen, Schadcode auszuführen. Ein Patch steht seit vier Jahren bereit.  ( 4 min )

Neben neuen Events für WebContents erlaubt das Release das Festlegen eines Code-Cache-Verzeichnisses und es nutzt Textersetzungen in Menüs unter macOS.  ( 4 min )

Als grundlegende Neuerung erlaubt die UI-Bibliothek nun optionale Concurrency. Server Components sind nach wie vor experimentell.  ( 5 min )

Trotz der Festnahme angeblicher Mitglieder, ist die Lapsus$-Gruppe wohl weiter aktiv. 70 Gigabyte an Daten aus einem weiteren Hack wurden jetzt öffentlich.  ( 4 min )

Bereits sein drittes CDN bringt Microsoft auf den Markt. Es soll mit DevOps-Funktionen, einer engen Azure-Verknüpfung und einem simplen Preismodell punkten.  ( 3 min )

Die elektronische Authentisierungsfunktion des Personalausweises lässt sich jetzt ohne Gang zum Amt aktivieren.  ( 3 min )

Wie unterscheiden sich die Public Clouds von AWS, Azure, Google, der Telekom und Hetzner – und wie nutzen Sie sie effektiv? 10 % Frühbucherrabatt bis 18. April.  ( 3 min )

Wie schon das MacBook Pro kommt die kleine Workstation mit hochohmigen Kopfhörern zurecht. Das bestätigt der Konzern in einem Supportdokument.  ( 4 min )

Das Entwicklerteam hinter dem C++-Microframework Crow baut mit dem ersten stabilen Release die Anbindung an das Cross-Platform-Tool CMake weiter aus.  ( 3 min )

Die neue Version des Kiosksystems aktualisiert den Unterbau, schraubt an der automatischen Konfiguration und optimiert die Bildausgabe.  ( 4 min )

Wer für die eigenen Mitarbeiter einen Chat einrichten will, muss nicht zu MS Teams oder Slack greifen: Die freie Alternative Zulip liegt nun in Version 5.0 vor.  ( 4 min )

Nach der Erschwerung des App-Trackings bereitet Apple offenbar eine dauerhafte Aktivierung von Private Relay vor – zumindest spekuliert das die Branche.  ( 4 min )

Trend Micro warnt vor Angriffen auf eine Sicherheitslücke in zentralen Verwaltungssoftware Apex Central. Zum Abdichten des Lecks stehen Updates bereit.  ( 3 min )

Das Event findet am 3./4. Mai 2022 online statt. Die Veranstalter tragen damit der pandemischen Lage in Deutschland Rechnung.  ( 4 min )

Früh in diesem Jahr erreichen viele Gebiete in Deutschland hohe Waldbrandgefahrenstufen. Mit einem Früherkennungssystem sollen Brände schneller erkannt werden.  ( 4 min )

Googles hundertste Version von Chrome ist da. Zu den wichtigsten Neuerungen zählt die Option, Browser-Fenster unterschiedlichen physischen Monitoren zuzuweisen.  ( 3 min )

Eine ungewöhnliche Kooperation: Samsung und Western Digital arbeiten zusammen. Zwar nicht an gemeinsamen Produkten, aber an Standards zum Thema Zoned Storage.  ( 3 min )

We recently covered creating fancy borders with CSS mask properties, and now we are going to cut the corners with CSS mask and clip-path! A lot of techniques exist to cut different shapes from the corners of any element. … Tricks to Cut Corners Using CSS Mask and Clip-Path Properties originally published on CSS-Tricks. You should get the newsletter.  ( 12 min )

A nascent information stealer called Mars has been observed in campaigns that take advantage of cracked versions of the malware to steal information stored in web browsers and cryptocurrency wallets. "Mars Stealer is being distributed via social engineering techniques, malspam campaigns, malicious software cracks, and keygens," Morphisec malware researcher Arnold Osipov said in a report  ( 3 min )

A duo of researchers has released a proof-of-concept (PoC) demonstrating the ability for a malicious actor to remote lock, unlock, and even start Honda and Acura vehicles by means of what's called a replay attack. The attack is made possible, thanks to a vulnerability in its remote keyless system (CVE-2022-27254) that affects Honda Civic LX, EX, EX-L, Touring, Si, and Type R models manufactured  ( 3 min )

For anyone with interest in cybersecurity, learning Python is a must. The language is used extensively in white hat hacking, and professionals use Python scripts to automate tests. It also has a use in the “soft” side of cybersecurity — like scraping the web for compromised data and detecting bugs.  Featuring nine full-length video courses, The Complete 2022 Python Programmer Bundle helps you  ( 3 min )

The LAPSUS$ data extortion gang announced their return on Telegram after a week-long "vacation," leaking what they claim is data from software services company Globant. "We are officially back from a vacation," the group wrote on their Telegram channel – which has nearly around 54,000 members as of writing – posting images of extracted data and credentials belonging to the company's DevOps  ( 3 min )

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Energy (DoE) are jointly warning of attacks against internet-connected uninterruptible power supply (UPS) devices by means of default usernames and passwords. "Organizations can mitigate attacks against their UPS devices, which provide emergency power in a variety of applications when normal power sources are  ( 3 min )

SonicWall has released security updates to contain a critical flaw across multiple firewall appliances that could be weaponized by an unauthenticated, remote attacker to execute arbitrary code and cause a denial-of-service (DoS) condition. Tracked as CVE-2022-22274 (CVSS score: 9.4), the issue has been described as a stack-based buffer overflow in the web management interface of SonicOS that  ( 2 min )

In this series of articles, we highlight design patterns and techniques to design better interfaces. You can also find more examples in [“Smart Interface Design Patterns”](https://smart-interface-design-patterns.com/), a 6h-video course with 100s of hand-picked examples, curated by Vitaly.  ( 10 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Chatbots could one day replace search engines. Here’s why that’s a terrible idea. Large AI models can simulate natural language with remarkable realism. Trained on hundreds of books and much of the internet,…  ( 4 min )

The world’s oceans are amazing carbon sponges. They already capture a quarter of human-produced carbon dioxide when surface waters react with the greenhouse gas in the air or marine organisms gobble it up as they grow. Their effectiveness has prompted growing hopes that we could somehow accelerate those natural processes to boost the amount the…  ( 4 min )

Eine kürzlich entdeckte Sicherheitslücke in zlib könnte Angreifern ermöglichen, Schadcode auszuführen. Ein Patch steht seit vier Jahren bereit.  ( 4 min )

Trend Micro warnt vor Angriffen auf eine Sicherheitslücke in zentralen Verwaltungssoftware Apex Central. Zum Abdichten des Lecks stehen Updates bereit.  ( 3 min )

Google has released Chrome 100 today, March 29th, 2022, to the Stable desktop channel, and it includes a new logo, security improvements, development features, and more. [...]  ( 4 min )

A newly launched information-stealing malware variant called Mars Stealer is rising in popularity, and threat analysts are now spotting the first notable large-scale campaigns employing it. [...]  ( 4 min )

A hacker has stolen almost $620 million in Ethereum and USDC tokens from Axie Infinity's Ronin network bridge, making it possibly the largest crypto hack in history. [...]  ( 3 min )

Online retail and photography manufacturing platform Shutterfly has disclosed a data breach that exposed employee information after threat actors stole data during a Conti ransomware attack. [...]  ( 3 min )

Today, the US Federal Trade Commission (FTC) sued Intuit, the maker of tax preparation software TurboTax, over deceptive advertising campaigns pitching free tax filing products that millions couldn't use. [...]  ( 3 min )

The Federal Bureau of Investigation (FBI) warned US election officials on Tuesday of an ongoing and widespread phishing campaign trying to steal their credentials since at least October 2021. [...]  ( 4 min )

A new campaign from the hacking group tracked as APT36, aka 'Transparent Tribe' or' Mythic Leopard,' has been discovered using new custom malware and entry vectors in attacks against the Indian government. [...]  ( 4 min )

In a joint advisory with the Department of Energy, the Cybersecurity and Infrastructure Security Agency (CISA) warned U.S. organizations today to secure Internet-connected UPS devices from ongoing attacks. [...]  ( 3 min )

A Wyze Cam internet camera vulnerability allows unauthenticated, remote access to videos and images stored on local memory cards and has remained unfixed for almost three years. [...]  ( 4 min )

As important as end user training and message filtering may be, there is a third method that tip the odds in their favor. Because phishing attacks often come disguised as password reset emails, it is important to handle password resets in a way that makes it obvious that email messages are not part of the password reset process. [...]  ( 5 min )

British-based cybersecurity vendor Sophos warned that a recently patched Sophos Firewall bug allowing remote code execution (RCE) is now actively exploited in attacks. [...]  ( 3 min )

Europol has announced the arrest of 108 people suspected of being involved in an international call center operation that tricked victims into investment scams. [...]  ( 3 min )

Security researchers are warning of a relatively new malware loader, that they track as Verblecon, which is sufficiently complex and powerful for rannsomware and erespionage attacks, although it is currently used for low-reward attacks. [...]  ( 4 min )

Microsoft has released the optional KB5011563 cumulative update preview for Windows 11, with fixes for stop errors triggering blue screens of death (BSOD) and other issues. [...]  ( 5 min )

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal civilian agencies to patch a Google Chome zero-day and a critical Redis vulnerability actively exploited in the wild within the next three weeks. [...]  ( 3 min )

Cops say they saw gadget added at family safety center A Tennessee man was arrested on Friday for allegedly trying to track his partner by attaching an Apple Watch to her car to monitor her whereabouts.…  ( 9 min )

Folks fill out online forms only to be told to upgrade to paid versions Intuit, makers of the tax-filing software TurboTax, deceives folks with false advertising and claims its product is free to use when it isn't always free, the US Federal Trade Commission claimed in a lawsuit filed Monday.…  ( 9 min )

Cloud giant's Graviton forcing the hand of rivals, according to analysts The increasing adoption of Arm-compatible processors by cloud service providers is expected to grow the CPU architecture's penetration rate in datacenter servers to 22 percent by 2025, according to a report by Taiwan-based research firm TrendForce.…  ( 9 min )

Cloud giant's Graviton forcing the hand of rivals, according to analysts The increasing adoption of Arm-compatible processors by cloud service providers is expected to grow the CPU architecture's penetration rate in datacenter servers to 22 percent by 2025, according to a report by Taiwan-based research firm TrendForce.…  ( 9 min )

As with analytics, so with ML – we're keeping everything in the box, says Big Red Oracle has added autoML, real-time elasticity, and price-performance trade-offs to Heatwave, the analytics engine it piggybacks on MySQL transactional database.…  ( 8 min )

Optional update finally adds one-click default app selection to Windows 11 The latest set of optional cumulative updates for Windows 11 contains an unlisted addition that users have been clamoring for since the OSes release: A one-click default browser change. …  ( 8 min )

First world problems: Too many NVMe drives, not enough seconds to spare A new Linux kernel patch from a Google engineer resolves a problem caused by a condition that many of us might quite like to experience – having too many NVMe drives.…  ( 8 min )

Toward making software development 'frictionless' over multiple processors, accelerators Arm says heterogeneous compute architectures – those with a mix of CPUs, GPUs, DPUs, and other processor types – pose a challenge for software developers, and greater multi-architecture support is needed to address this.…  ( 8 min )

Mnuchin to be board chair of Softbank-backed security startup Zimperium Former US Treasury secretary Steve Mnuchin's private equity firm has announced its plans to buy a controlling stake in a mobile cybersecurity company for more than half a billion dollars.…  ( 8 min )

It may have an official-sounding name but it's a community effort Rolling Rhino is a new community remix of Ubuntu, but with a unique twist: it has a whole new release model, rather than just a different desktop.…  ( 8 min )

Operators used social media to distort status of fighting, instill panic in residents Ukraine's security agency has shut down five bot farms since the start of Russia's invasion of the country almost five weeks ago, slowing down a Russian operation designed to spread disinformation in the war-torn country and to sow panic among its frightened residents.…  ( 8 min )

Stopping Amazon, Google, others from prioritizing own products and services A letter from the Department of Justice to Congress makes it clear where the Biden administration stands on antitrust legislation targeting big tech: They're all for it.…  ( 8 min )

Aims for consistent management across public and private clouds Microsoft has unveiled a public preview of Arc-enabled Azure Stack HCI.…  ( 8 min )

The GPU giant says it's for the 'most ambitious users' Nvidia is finally releasing its latest monster of a graphics processor, the GeForce RTX 3090 Ti GPU, which it said will super-power content creation applications and enable 8K gaming, assuming you're willing to part with a couple thousand dollars.…  ( 8 min )

Interesting blue sky research aims to put the quant in quantum, although progress in sector isn't rapid IBM is working with HSBC bank to explore potential applications for quantum computing in financial services.…  ( 8 min )

Crew alleged to have banked over $1m thanks to pandemic-induced usage bumps Some might wish they could go back to the onset of the pandemic and invest in online communication tools. The problem for three software developers facing charges of insider trading is that they worked for one of these companies.…  ( 8 min )

You can't fool me, young man. It's C all the way down! Believe it or not, not everything is based on C. There are current, shipping, commercial OSes written before C was invented, and now others in both newer and older languages that don't involve C at any level or layer.…  ( 11 min )

Legit employers don't normally send a check before you've started – or ask you to send money to a Bitcoin address Scammers appear to be targeting university students looking to kickstart their careers, according to research from cybersecurity biz Proofpoint.…  ( 9 min )

Move follows Microsoft's own tools to find out how things are really done Celonis has bought Process Analytics Factory (PAF), a firm that integrates its technology with Microsoft's Power BI platform, in a deal said to be worth $100m.…  ( 8 min )

Not the first time the letters POS have been associated with someone's repo Sometimes the best things are the most simple. A case in point: sending GitHub issues to an old thermal POS printer via a Raspberry Pi.…  ( 9 min )

Playbook on how to sell into market worth tens of billions The UK government has published a guide to public-sector technology procurement which promises to offer vendors insight into forthcoming technology spending in the £46bn ($60bn) market.…  ( 9 min )

German retailer stops selling flying cameras from firm the US labels an arm of China's government Chinese drone-maker DJI has denied multiple allegations it has aided Russia's military during the illegal invasion of Ukraine – an extraordinary claim, as the firm has previously come to the attention of US authorities for leaking data and aiding human rights abuses.…  ( 9 min )

Software will figure out number of beds needed – up to three weeks ahead At least 100 NHS trusts in England are to start using machine-learning software to predict the number of patients expected to be admitted to Accident and Emergency departments each day.…  ( 9 min )

Of course it will officially be massively popular – regardless of how many actually use it China's top government officials have a new space to meet and "build the [Chinese Communist] Party": a custom-built metaverse.…  ( 9 min )

JD.com's own servers, sold by the rackful, using cold plate cooling tech to tease possible 1.1 PUE Chinese kit-maker to the stars, Inspur Technologies, and local e-commerce titan JD.com have started jointly offering servers – the very kit the web bazaar uses in production.…  ( 9 min )

Windows backdoor shows off some interesting techniques Cyber-criminals are using compromised Microsoft Exchange servers to spam out emails designed to infect people's PCs with IcedID,…  ( 10 min )

Massive job losses reported across Middle Kingdom's tech sector China's big tech companies are making deep job cuts, and at least one is framing them as "graduation" from the company.…  ( 9 min )

Chrome trials scheduled for FLEDGE and Topics APIs Google is preparing another round of tests for the latest iteration of its purportedly private-preserving ad technology, after last year's Federated Learning of Cohorts (FLoC) experiment revealed the need for further refinement.…  ( 10 min )

Don't forget about our big stateside expansion plans, say Asian foundries Contract chip manufacturers TSMC and Samsung Electronics reportedly want to ensure they can receive some part of the $52 billion in subsidies the United States plans to use to expand the country's chipmaking footprint.…  ( 8 min )

Die EU-Kommission will mit dem geplanten Chips-Gesetz massiv Investitionen fördern. Mitgliedsstaaten und die Industrie sehen noch Bedarf zum Nachjustieren.  ( 5 min )

In einem offenen Brief warnt der CEPIS-Dachverband nationaler Informatikvereinigungen vor "Client-Side Scanning" und fordert ein Recht auf Verschlüsselung.  ( 3 min )

Der 1,5 Exaflops starke Supercomputer Frontier geht erst 2023 vollständig ans Netz. Bis dahin gibt es den Mini-Ableger Crusher.  ( 3 min )

Das Arbeiten zu Hause mit Chat- und Video-Tools lässt die Grenzen zwischen Beruf und Privatleben verschwimmen. Spezielle Features sollen sensibilisieren.  ( 4 min )

Dank Akku und Solarpanel können Anwender die Reolink Go 4G nahezu autark einsetzen. Wie gut die Überwachungskamera in der Praxis funktioniert, zeigt ein Test.  ( 6 min )

Ein Strategiepapier legt die Ziele der Cyberagentur bis 2025 fest: Es gehe darum, mit Forschung die Cybersicherheit in Deutschland gesamthaft zu stärken.  ( 4 min )

Angreifer könnten aufgrund von Sicherheitslücken in nf_tables im Linux-Kernel ihre Rechte zu Root ausweiten. Patches dichten die Sicherheitslecks ab.  ( 4 min )

Da immer mehr Dienstleistungen digitalisiert werden, warnt die Bundesvereinigung der Senioren-Assistenten Deutschland vor einer zunehmenden Vereinsamung.  ( 3 min )

Nicht nur die größten globalen Cloud-Anbieter kommen aus den USA, auch die Cloud-Rechenzentren ballen sich in Nordamerika.  ( 3 min )

Nvidia quetscht die letzten Prozente Leistung aus der GA102-GPU und verkauft das Ergebnis als GeForce RTX 3090 Ti – mit gehörigem Preisaufschlag.  ( 4 min )

Das Nutzen der Möglichkeiten für die Verwaltung von Endgeräten ist kein Kann, sondern wird zum Muss.  ( 6 min )

Die Frage "Ist diese Software-Architektur zukunftssicher?" kann man eigentlich generell mit "nein" beantworten.  ( 7 min )

Das vogelbunte Linux-System etwa zum Suchen von Sicherheitslücken lässt sich auf dem Stable-Zweig Debians nieder. Neu ist eine Ausgabe für den Raspberry Pi 4.  ( 5 min )

Professionelle Videos sind wichtiger Teil der Unternehmenskommunikation. Der Workshop vermittelt Grundlagen von Planung über Dreh bis zur Postproduktion.  ( 4 min )

Amazon führt die ARM-Revolution an: AWS' Graviton-Prozessoren machen 2022 einen großen Teil aller neuen Server aus.  ( 4 min )

Das Zusammenspiel von Debian-Systemen und Redis kann zu ernsten Sicherheitsproblemen führen. Dagegen abgesicherte Versionen schaffen Abhilfe.  ( 3 min )

An fünf Terminen im Mai und Juni lernen Interessierte in 20 praxisnahen Stunden, ihre Rolle als Product Owner zu meistern.  ( 4 min )

In der Nacht kam es zu einem massiven Cyberangriff auf einen der größten ukrainischen Internetprovider. Die Lage normalisiert sich inzwischen jedoch wieder.  ( 3 min )

Am Montag war Twitter fast eine halbe Stunde lang nur eingeschränkt zu erreichen. Grund war eine Fehlkonfiguration in Russland. Über die Gründe wird spekuliert.  ( 3 min )

Am kommenden Dienstag geht es beim nächstenThementag der Online-Konferenz storage2day um Storage für die Cloud und aus der Cloud. Die Teilnahme ist kostenlos.  ( 3 min )

Angreifer könnten die Authentifizierung in einigen Zyxel-Firewalls umgehen und dadurch die Kontrolle über die Geräte erlangen. Firmware-Updates stehen bereit.  ( 3 min )

Wie lässt sich Microsofts Cloud-Officepaket 365 sicher und in Übereinstimmung mit den unternehmenseigenen Compliance-Regeln einsetzen? Bis 12.4. 10 % Rabatt.  ( 3 min )

After two years where almost everything moved online, 2022 marks the return of in-person conferences. In fact, [SmashingConf is back](https://smashingconf.com/conferences): coming to San Francisco and Austin in June, Freiburg (Germany) in September, and New York in October.  ( 3 min )

Are you a designer or developer affected by the war in Ukraine? Here are some options to consider if you’re looking for a design or tech job.  ( 3 min )

Angreifer könnten aufgrund von Sicherheitslücken in nf_tables im Linux-Kernel ihre Rechte zu Root ausweiten. Patches dichten die Sicherheitslecks ab.  ( 4 min )

Das Zusammenspiel von Debian-Systemen und Redis kann zu ernsten Sicherheitsproblemen führen. Dagegen abgesicherte Versionen schaffen Abhilfe.  ( 3 min )

Angreifer könnten die Authentifizierung in einigen Zyxel-Firewalls umgehen und dadurch die Kontrolle über die Geräte erlangen. Firmware-Updates stehen bereit.  ( 3 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. A US oil-drilling hotspot is kicking out far more methane than we thought The news: One of the largest and fastest-growing oil production sites in the US is emitting far more methane than…  ( 4 min )

At last year’s Google I/O, its annual showcase of new widgets and work-in-progress tech, CEO Sundar Pichai revealed his company’s “latest breakthrough in natural-language understanding”: a chatbot called LaMDA, designed to converse on any topic.   He then gave a demo in which LaMDA answered questions about Pluto in natural language. The exchange showed off a…  ( 7 min )

A threat actor of likely Pakistani origin has been attributed to yet another campaign designed to backdoor targets of interest with a Windows-based remote access trojan named CrimsonRAT since at least June 2021. "Transparent Tribe has been a highly active APT group in the Indian subcontinent," Cisco Talos researchers said in an analysis shared with The Hacker News. "Their primary targets have  ( 3 min )

A group of academics has designed a new system known as "Privid" that enables video analytics in a privacy-preserving manner to combat concerns with invasive tracking. "We're at a stage right now where cameras are practically ubiquitous. If there's a camera on every street corner, every place you go, and if someone could actually process all of those videos in aggregate, you can imagine that  ( 3 min )

Cybersecurity firm Sophos on Monday warned that a recently patched critical security vulnerability in its firewall product is being actively exploited in real-world attacks. The flaw, tracked as CVE-2022-1040, is rated 9.8 out of 10 on the CVSS scoring system and impacts Sophos Firewall versions 18.5 MR3 (18.5.3) and older. It relates to an authentication bypass vulnerability in the User Portal  ( 2 min )

An unidentified threat actor has been observed employing a "complex and powerful" malware loader with the ultimate objective of deploying cryptocurrency miners on compromised systems and potentially facilitating the theft of Discord tokens. "The evidence found on victim networks appears to indicate that the goal of the attacker was to install cryptocurrency mining software on victim machines,"  ( 3 min )

Cybersecurity researchers have shed more light on a malicious loader that runs as a server and executes received modules in memory, laying bare the structure of an "advanced multi-layered virtual machine" used by the malware to fly under the radar. Wslink, as the malicious loader is called, was first documented by Slovak cybersecurity company ESET in October 2021, with very few telemetry hits  ( 3 min )

A threat actor dubbed "RED-LILI" has been linked to an ongoing large-scale supply chain attack campaign targeting the NPM package repository by publishing nearly 800 malicious modules. "Customarily, attackers use an anonymous disposable NPM account from which they launch their attacks," Israeli security company Checkmarx said. "As it seems this time, the attacker has fully-automated the process  ( 3 min )

An independent security researcher has shared what's a detailed timeline of events that transpired as the notorious LAPSUS$ extortion gang broke into a third-party provider linked to the cyber incident at Okta in late January 2022. In a set of screenshots posted on Twitter, Bill Demirkapi published a two-page "intrusion timeline" allegedly prepared by Mandiant, the cybersecurity firm hired by  ( 3 min )

Privateer to help avoid collisions and more debris around our planet Apple co-founder Steve Wozniak opened up about his space startup Privateer at the Global Entrepreneurship Congress in Riyadh, Saudi Arabia this week.…  ( 9 min )

Gosh, some apps are flatter than others? Whatever shall we do? GNOME 42 is here, but its new look and feel doesn't yet include all of the environment. This is already causing rumblings of discontent.…  ( 9 min )

Says he wasn't given leave options available to women colleagues Michael Stickler, a former IBM data scientist, has sued Big Blue for gender discrimination and retaliation after he complained that he was not being offered the same family leave options available to his women colleagues.…  ( 9 min )

CPU clock versus cache The CPU horse race continues between Intel and AMD, this time with the impending availability of Intel's Core i9-12900KS, which is said to be able to hit 5.5GHz on two cores.…  ( 8 min )

Authentication bypass followed by remote-code execution at the network boundary Sophos has patched a remote code execution (RCE) vulnerability in its firewall gear that was disclosed via its bug-bounty program.…  ( 8 min )

Another bug squashed in JavaScript engine Google Chrome and Microsoft Edge have been updated to patch a security flaw an exploit for which is said to be in the wild.…  ( 8 min )

More than 70 businesses created fake profiles to close sales Two Stanford researchers have fallen down a LinkedIn rabbit hole, finding over 1,000 fake profiles using AI-generated faces at the bottom.…  ( 8 min )

Mustang Panda deploys variant of Korplug malware to target European officials and ISPs A China-based threat group is likely running a month-long campaign using a variant of the Korplug malware and targeting European diplomats, internet service providers (ISPs) and research institutions via phishing lures that refer to Russia's invasion of Ukraine and COVID-19 travel restrictions.…  ( 9 min )

Plantronics and Polycom have a new parent company HP Inc sees the future of its business as one supporting a workforce partially based at home and partially in the office, and appears to have bought office telecom giant Poly for that reason.…  ( 8 min )

'Tiny' testbed already crushes Oak Ridge's past supercomputers The United States has opened up a small but powerful test system for researchers to get a taste of what is expected to become the country's fastest supercomputer and one of the world's fastest. And the tiny testbed, named "Crusher" is already faster than previous top US supercomputers.…  ( 9 min )

'Not all open source is created equal' Interview  Cloud infrastructure outfit HashiCorp has traditionally been all about the freemium model and sold plenty of self-managed subscriptions for its services to customers over the years. That is changing.…  ( 11 min )

Subsidiary sales, enterprise division may be responsible for the buoying Chinese telecom giant Huawei's 2021 report is out, showing the company had a massive drop in total revenue last year, but an even bigger bump in profit. …  ( 9 min )

Refurbed former Thomson Reuters DC adds 12,000 sqm to holdings Colocation firm Telehouse has opened its fifth datacenter in London Docklands, claiming it will be the company’s largest global facility once fully up and running. The firm has invested £223 million into refurbishing the building, which was formerly the site of a datacenter operated by Thomson Reuters.…  ( 9 min )

Plus: Ransomware gangster sentenced, Dell patches more Log4j bugs, and cartoon apes gone bad In Brief  Triton malware remains a threat to the global energy sector, according to an FBI warning.…  ( 11 min )

Plus: GPT-NeoX-20B, the largest open-source language model available yet, and a new AI Silicon Valley VC fund In brief  Ukraine's vice prime minister has confirmed Clearview AI's controversial facial recognition system is being used to identify dead Russian soldiers just weeks after it started using the tech in the conflict.…  ( 9 min )

ECASH Act calls for Treasury to develop electronic currency, no blockchain required House Democrats on Monday plan to introduce a law bill that calls for the development of an electronic version of the US dollar that has the same legal status and privacy expectations as physical currency.…  ( 10 min )

Android messaging heist isn't the action of a well company. Let us help Opinion  One of the joys of academic research is that if you do it right, you can prove the truth. In the case of computer science professor Douglas Leith, this truth is that Google has been taking detailed notes of every telephone call and SMS message made and received on the default Android apps.…  ( 10 min )

...8 years after role in controversial £10bn IT deal with UK tax authority was set to end The UK tax collector has extended its relationship with French IT service provider Capgemini in a £215m contract, which awards the outsourcer work to look after tech provided under the controversial 2004 Aspire contract at least eight years beyond the first proposed end date for the deal.…  ( 9 min )

Forgive the self-taught Visual Basic programmer, for they know not what they do. Or do they? Who, Me?  Thank goodness for code reviews. However things weren't always so squeaky clean as one Register reader discovered while attempting to sort another's sweary source. Welcome to Who, Me?…  ( 9 min )

Teams-like application boasts 500 million users, but Microsoft has more active users Alibaba Cloud has decided to make its DingTalk collaborative workplace platform more attractive to enterprise customers, in China and beyond.…  ( 8 min )

Just look at Ericsson and ISIS, Ashley Yablon says If ZTE and other Chinese giants defy bans on selling American technology to Russia, it will be because they can't help but chase the revenue, says Ashley Yablon, the whistleblower whose evidence led to ZTE being fined for willfully ignoring the US ban on exports to Iran.…  ( 10 min )

COBOL and Itanium to keep the job well into 2023 – past original 2020 go-live date The Australian Securities Exchange (ASX) is attempting to replace its core trading systems with a blockchain-powered alternative – an effort often touted as one of the world's most significant blockchain implementations. Unfortunately, the project has struck trouble, again.…  ( 8 min )

Changes story again to say customers weren't in danger, admits it waited for incident report instead of asking tough questions Identity-management-as-a-service outfit Okta has acknowledged that it made an important mistake in its handling of the attack on a supplier by extortion gang Lapsus$.…  ( 9 min )

First Russian addition to FCC's Very Naughty List apparently unconnected to illegal invasion of Ukraine The United Stations Federal Communications Commission (FCC) has labelled Kaspersky, China Mobile, and China Telecom as threats to national security.…  ( 8 min )

Hackers are compromising WordPress sites to insert a malicious script that uses visitors' browsers to perform distributed denial-of-service attacks on Ukrainian websites. [...]  ( 3 min )

The Ukrainian Security Service (SSU) has announced that since the start of the war with Russia, it has discovered and shut down five bot farms with over 100,000 fake social media accounts spreading fake news. [...]  ( 3 min )

Security hardware manufacturer SonicWall has fixed a critical vulnerability in the SonicOS security operating system that allows denial of service (DoS) attacks and could lead to remote code execution (RCE). [...]  ( 4 min )

SunCrypt, a ransomware as service (RaaS) operation that reached prominence in mid-2020, is reportedly still active, even if barely, as its operators continue to work on giving its strain new capabilities. [...]  ( 4 min )

Microsoft will allow Windows users to block drivers with known vulnerabilities with the help of Windows Defender Application Control (WDAC) and a vulnerable driver blocklist. [...]  ( 3 min )

Meet Satoshi Island, a 32 million square foot private isle giving you access to pristine waters, year-round sunlight, modular homes, and the "promise of a decentralized future." The Satoshi Island we're talking about isn't a tale of fiction, but a real-life private island dedicated to the crypto community. [...]  ( 5 min )

The Commission for Communications and IT at "PCΠΠ", the country's largest entrepreneurship union, has warned about the rising threat of extensive service outages due to a lack of telecom equipment. [...]  ( 5 min )

The distribution of the IcedID malware has returned to notable numbers thanks to a new campaign that hijacks existing email conversations threads and injects payloads that are hard to spot as malicious. [...]  ( 4 min )

Windows 11 version 22H2 aka Sun Valley 2 is set to launch later this year. Unlike the original Windows 11 release, it won't be a massive update with radical design changes. Instead, Sun Valley 2 will be similar to Windows 10 Anniversary Update, so you can expect minor improvements and a few new features. [...]  ( 4 min )

A bookmarklet is a JavaScript-based bookmark that adds to a web browser. I’d like to show you some awesome web browser hacks to aid your web development workflow and how to convert those hacks into time-saving bookmarklets. Activating design mode … 6 Useful Bookmarklets to Boost Web Development originally published on CSS-Tricks. You should get the newsletter.  ( 5 min )

One of the largest and fastest-growing oil production sites in the US is emitting far more methane than previously measured. It’s well known that oil and natural-gas production is a significant source of the powerful greenhouse gas: methane that is trapped underground leaks out from wells and pipelines, and it can also be released intentionally…  ( 3 min )

Since the 1940s, scientists have studied ways to increase rainfall with the goal of increasing precipitation in arid and semi-arid climates. Today, that endeavor is making incredible leaps and bounds as scientists and engineers apply nanotechnology to improve the effectiveness of cloud seeding. “The global water shortage has continuously intensified by rapid population growth and…  ( 9 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. Quantum computing has a hype problem As a buzzword, quantum computing probably ranks only below AI in terms of hype. Large tech companies now have substantial research and development efforts in quantum computing.…  ( 4 min )

As a buzzword, quantum computing probably ranks only below AI in terms of hype. Large tech companies such as Alphabet, Amazon, and Microsoft now have substantial research and development efforts in quantum computing. A host of startups have sprung up as well, some boasting staggering valuations. IonQ, for example, was valued at $2 billion when…  ( 6 min )

When it comes to computing ability, the general rule of thumb is more is better. Quantum computers promise to feed this hunger. Their immense processing power derives from their ability to store and handle significantly larger volumes of data than classical bit-driven computers. As a result, a future quantum computer, in theory, could take minutes…  ( 3 min )

In this article, we’ll talk about how to adapt our sites to the different scenarios of a device pointer: whether it has a pointer or not, or how accurate it is. To adapt our site to those devices’ needs we’ll talk about how to properly use media queries `hover`, `pointer`, `any-hover` and `any-pointer`.  ( 14 min )

Das Cloudgroßprojekt Gaia-X wurde als große Hoffnung für die digitale Souveränität gehandelt. Nun scheint dafür kein Geld mehr vorhanden zu sein.  ( 4 min )

Die FinFisher GmbH und zwei weitere Firmen der Unternehmensgruppe haben nach einer Strafanzeige und anschließenden Kontopfändung Insolvenz angemeldet.  ( 4 min )

Eine KI analysiert Bilder, die auf eBay-Kleinanzeigen angeboten werden, nach bestimmten Kriterien. Gestohlene Bikes sollen sich so auffinden lassen.  ( 4 min )

Die Sicherheitstechnik DNSSEC hilft gegen DNS-Umleitungen, verbreitet sich aber nur langsam. Nun schlagen Entwickler Trockenübungen als Anschubhilfe vor.  ( 5 min )

Wer jetzt die vierte Ausgabe der Online-Konferenz am 27. April 2022 bucht, bekommt außer dem Frühbucherrabatt die 20 Videoaufzeichnungen der früheren Auflagen.  ( 3 min )

Seit einem Monat funktioniert Starlink von SpaceX in der Ukraine. Inzwischen ist es offenbar eine wichtige Hilfe bei der Abwehr des russischen Angriffskriegs.  ( 4 min )

Das Paket Swift Async Algorithms baut auf den Erfahrungen vom Combine-Framework auf und setzt Algorithmen mit async/await um.  ( 3 min )

Im PrimeBook Circular steckt ein standardisiertes Rechenmodul, das sich bei veränderten Ansprüchen oder neuen CPU-Generationen wechseln lässt.  ( 4 min )

Sowohl für Debian Bullseye als auch Buster hat das Projekt einen neuen Zwischenstand veröffentlicht. Wer häufig Updates einspielt, braucht nicht aktiv werden.  ( 3 min )

Cyber-Gangster führen sich gegenseitig hinters Licht.  ( 3 min )

Intel stellt die 16-Kern-CPU Core i9-12900KS im Rahmen eines Livestreams vor. Shop-Seiten haben zwischenzeitlich neue Details verraten.  ( 3 min )

Die Bundesanstalt für Finanzdienstleistungsaufsicht warnt vor betrügerischen E-Mails mit vermeintlichen Zahlungsaufforderungen im Namen der BaFin.  ( 3 min )

Mit der am 28. April ausgerichteten Online-Konferenz lernt man die Herausforderungen von Microservices zu meistern. Noch bis 7. April gilt der Frühbucherrabatt.  ( 3 min )

Oliver Winter spricht in dieser Podcast-Episode mit Peter Beck über die Rechte und Pflichten, die ein Product Owner übernehmen muss.  ( 2 min )

Die Internet Security Days kehren im September ins Phantasialand zurück. Vortragsideen für die IT-Security-Fachkonferenz sind noch bis zum 3. April willkommen.  ( 3 min )

Die Firewall von Sophos ist löchrig. Aktualisierte Versionen lösen das Sicherheitsproblem.  ( 3 min )

In zahlreichen Sonicwall-Modellen klafft eine Sicherheitslücke, durch die Angreifer mit manipulierten Paketen Code einschleusen oder das Gerät lahmlegen können.  ( 4 min )

Linux-Server effektiv und umfassend gegen Angriffe absichern – von der Datenverschlüsselung bis zu SELinux. Wochenworkshop; 10 Prozent Rabatt bis 11. April.  ( 3 min )

Der Frühling beschert Sachsen-Anhalt blühende Landschaften. Apple vereint zwei M1-Chips und ARM baut Hunderte Arbeitsplätze ab.  ( 5 min )

Beim Cyberkrieg sind auch Cybergangs involviert. Für die ist die Unterstützung einer Kriegspartei jedoch nicht immer gut fürs Geschäft.  ( 7 min )

A new email phishing campaign has been spotted leveraging the tactic of conversation hijacking to deliver the IceID info-stealing malware onto infected machines by making use of unpatched and publicly-exposed Microsoft Exchange servers. "The emails use a social engineering technique of conversation hijacking (also known as thread hijacking)," Israeli company Intezer said in a report shared with  ( 3 min )

You don't like having the FBI knocking on your door at 6 am in the morning. Surprisingly, nor does your usual cybercriminal. That is why they hide (at least the good ones), for example, behind layers of proxies, VPNs, or TOR nodes. Their IP address will never be exposed directly to the target's machine. Cybercriminals will always use third-party IP addresses to deliver their attacks. There are  ( 4 min )

The operators of the Purple Fox malware have retooled their malware arsenal with a new variant of a remote access trojan called FatalRAT, while also simultaneously upgrading their evasion mechanisms to bypass security software. "Users' machines are targeted via trojanized software packages masquerading as legitimate application installers," Trend Micro researchers said in a report published on  ( 3 min )

Muhstik, a botnet infamous for propagating via web application exploits, has been observed targeting Redis servers using a recently disclosed vulnerability in the database system. The vulnerability relates to CVE-2022-0543, a Lua sandbox escape flaw in the open-source, in-memory, key-value data store that could be abused to achieve remote code execution on the underlying machine. The  ( 3 min )

Die Firewall von Sophos ist löchrig. Aktualisierte Versionen lösen das Sicherheitsproblem.  ( 3 min )

In zahlreichen Sonicwall-Modellen klafft eine Sicherheitslücke, durch die Angreifer mit manipulierten Paketen Code einschleusen oder das Gerät lahmlegen können.  ( 4 min )

The Hive ransomware operation has converted their VMware ESXi Linux encryptor to the Rust programming language and added new features to make it harder for security researchers to snoop on victim's ransom negotiations. [...]  ( 4 min )

Sophos has fixed a critical vulnerability in its Sophos Firewall product that allows remote code execution. Tracked as CVE-2022-1040, the authentication bypass vulnerability exists in the User Portal and Webadmin areas of Sophos Firewall. [...]  ( 4 min )

Okta has admitted that it made a mistake delaying the disclosure hack from the Lapsus$ data extortion group that took place in January. Additionally, the company has provided a detailed timeline of the incident and its investigation activities. [...]  ( 5 min )

Der Drohnenkrieg ist laut US-Whistleblowern ohne umfassendes Computer- und Speichernetzwerk dahinter nicht denkbar. Neben Big Tech mische SpaceX kräftig mit.  ( 4 min )

Internetsurfer in Deutschland verbrauchten 2021 fast doppelt so viel Datenvolumen wie zwei Jahre zuvor. Schätzungen zufolge waren es 100 Milliarden Gigabyte.  ( 3 min )

Es ist die größte jemals getätigte Investition in Sachsen-Anhalt: Am Stadtrand von Magdeburg entsteht ab 2023 eine Intel-Fab.  ( 7 min )

Im März erweiterte Apple seine Produktlinie um den ungewöhnlichen Doppel-Chip M1 Ultra, der den neuen Mac Studio zu Workstation-Leistungen treibt.  ( 7 min )

Zigbee gehört zu den populärsten Funktechnologien im Smart-Home-Bereich. Insgesamt unterstützen mehr als 400 Hersteller mit über 4000 Produkten die Technologie.  ( 4 min )

Die Staatsanwaltschaft Göttingen ermittelt in einem Fall von Internetkriminalität. Der Schaden liegt allein in Niedersachsen bei über drei Millionen Euro.  ( 4 min )

Google hat neue Versionen vom Webbrowser Chrome veröffentlicht, die eine Sicherheitslücke schließen, für die bereits Exploit-Code existiert.  ( 3 min )

Onlineshopping ist für viele selbstverständlich – doch nicht jedes Angebot ist seriös. c’t uplink hilft Fake-Shops und falsche Schnäppchen zu entlarven.  ( 3 min )

Das BSI hält den Virenschutz von Kaspersky angesichts der aktuellen Lage in Russland nicht länger für tragbar. Kaspersky sieht das anders. Was jetzt zu tun ist.  ( 7 min )

The Cybersecurity and Infrastructure Security Agency (CISA) has added a massive set of 66 actively exploited vulnerabilities to its catalog of 'Known Exploited Vulnerabilities.' [...]  ( 4 min )

Western Digital has fixed a critical severity vulnerability in the Samba vfs_fruit VFS module that enabled attackers to gain remote code execution with root privileges on unpatched My Cloud OS 5 devices. [...]  ( 3 min )

Western Digital has fixed a critical severity vulnerability in the Samba vfs_fruit VFS module that enabled attackers to gain remote code execution with root privileges on unpatched My Cloud OS 5 devices. [...]  ( 3 min )

'Competition is critical to our success,' says US agency boss NASA is offering a second lucrative contract to fund a lunar lander for its upcoming mission to put men and the first woman on the Moon, it announced this week.…  ( 8 min )

As more and more biz pays up to restore data, we're told Ransomware is among the most feared of the myriad cyberthreats circulating today, putting critical data at risk and costing some enterprises tens of millions of dollars in damage and ransoms paid. However, ransomware doesn't occur in a vacuum, according to security startup Lumu Technologies.…  ( 10 min )

Or: What kind of research Google's getting in its Mandiant takeover GTC  Disassembling and analyzing malware to see how it works, what it's designed to do and how to protect against it, is mostly a long, manual task that requires a strong understanding of assembly code and programming, techniques and exploits used by miscreants, and other skills that are hard to come by.…  ( 10 min )

The U.S. Federal Communications Commission (FCC) on Friday moved to add Russian cybersecurity company Kaspersky Lab to the "Covered List" of companies that pose an "unacceptable risk to the national security" of the country. The development marks the first time a Russian entity has been added to the list that's been otherwise dominated by Chinese telecommunications firms. Also added alongside  ( 3 min )

A Chinese-speaking threat actor called Scarab has been linked to a custom backdoor dubbed HeaderTip as part of a campaign targeting Ukraine since Russia embarked on an invasion last month, making it the second China-based hacking group after Mustang Panda to capitalize on the conflict. "The malicious activity represents one of the first public examples of a Chinese threat actor targeting Ukraine  ( 3 min )

Google on Friday shipped an out-of-band security update to address a high severity vulnerability in its Chrome browser that it said is being actively exploited in the wild. Tracked as CVE-2022-1096, the zero-day flaw relates to a type confusion vulnerability in the V8 JavaScript engine. An anonymous researcher has been credited with reporting the bug on March 23, 2022. Type confusion errors,  ( 3 min )

Google hat neue Versionen vom Webbrowser Chrome veröffentlicht, die eine Sicherheitslücke schließen, für die bereits Exploit-Code existiert.  ( 3 min )

The Federal Communications Commission (FCC) added Russian cybersecurity firm Kaspersky to its Covered List, saying it poses unacceptable risks to U.S. national security. [...]  ( 3 min )

With the US providing military aid to Ukraine and its sanctions damaging the Russian economy, the US government disclosed this week that there is intelligence that Russia is preparing for potential cyberattacks against US interests. [...]  ( 6 min )

Google has released Chrome 99.0.4844.84 for Windows, Mac, and Linux users to address a high-severity zero-day bug exploited in the wild. [...]  ( 3 min )

Threat analysts report having spotted a change in the operations of the Muhstik threat group, which has now switched to actively exploiting a Lua sandbox escape flaw in Redis. [...]  ( 3 min )

The cybercrime group behind the development of the Racoon Stealer password-stealing malware has suspended its operation after claiming that one of its developers died in the invasion of Ukraine. [...]  ( 4 min )

Maksim Berezan, an Estonian man linked to multimillion-dollar ransomware attacks, was sentenced on Friday to 66 months in prison for his involvement in online fraud schemes. [...]  ( 3 min )

Bug bounty platform HackerOne disabled Kaspersky's bug bounty program on Friday following sanctions imposed on Russia and Belarus after the invasion of Ukraine. [...]  ( 3 min )

A set of flaws affecting the world's leading messaging and email platforms, including Instagram, iMessage, WhatsApp, Signal, and Facebook Messenger, has allowed threat actors to create legitimate-looking phishing URLs for the past three years. [...]  ( 5 min )

Microsoft says Windows 7 recovery discs created using the Control Panel Backup and Restore app will fail to start after installing Windows updates released since January 11, 2022. [...]  ( 3 min )

Researchers have disclosed a 'replay attack' vulnerability affecting select Honda and Acura car models, that allows a nearby hacker to unlock and start your car wirelessly. Honda has no plans to fix the issue in older models at this time. [...]  ( 5 min )

Modern phishing kits sold on cybercrime forums as off-the-shelve packages feature multiple and sophisticated detection avoidance and traffic filtering systems to ensure that internet security solutions won't mark them as a threat. [...]  ( 4 min )

Morgan Stanley Wealth Management, the wealth and asset management division of Morgan Stanley, says some of its customers had their accounts compromised following vishing attacks. [...]  ( 4 min )

Think about Tesla charging extra for features like Autopilot, then look at your GPU card, and you'll get the idea GTC  Nvidia has laid out a roadmap of sorts to a trillion dollars in revenue.…  ( 10 min )

Full-stack approach has big plans Nvidia's has laid out a roadmap to a trillion in revenue in the future, and that company's serving of software alongside chips could put a dent on your wallet.…  ( 10 min )

Conti, REvil declared most active criminal gangs The average ransom demand hit $2.2 million in 2021, a 144 percent rise from the year prior, according to Palo Alto Networks' Unit 42 consultants, while the average ransom payment grew 78 percent to $541,010.…  ( 11 min )

Conti, REvil remain most active criminal gangs The average ransom demand hit $2.2 million in 2021, a 144 percent rise from the year prior, according to Palo Alto Networks' Unit 42 consultants, while the average ransom payment grew 78 percent to $541,010.…  ( 11 min )

Ex-senior director also claims Feds have seen evidence and done nothing Yasser Elabd, who formerly served as a senior director at Microsoft, has accused the Windows giant of paying illegal bribes to close business deals in the Middle East and Africa.…  ( 10 min )

CSPs, social giants behind bulk of colocation leasing activity in 2021 Datacenter demand is booming in North America as the economy recovers from the coronavirus pandemic, according to a report from CBRE.…  ( 8 min )

Nvidia says it has sped up NeRF rendering to mere tenths of a millisecond Nvidia has hashed out a new approach to neural radiance field (NeRF) technology that will generate a fully rendered 3D scene from just a few still photos, all in a matter of seconds, including model training time.…  ( 9 min )

Cluster tech vulnerability means either patching or port tinkering could be on the cards Atlassian has demonstrated the interconnectedness of all things with a warning that some versions of Bitbucket Data Center and Confluence Data Center require patching courtesy of the Hazelcast Java deserialization vulnerability.…  ( 8 min )

Any models made between 2016 and 2020 can have key fob codes sniffed and re-transmitted If you're driving a Honda Civic manufactured between 2016 and 2020, this newly reported key fob hijack should start your worry engine.…  ( 8 min )

EU and US reach agreement on transatlantic data sharing, but court challenges ahead The US and the EU have reached an agreement to enhance Privacy Shield following almost two years of work since the European Court of Justice struck down the data-sharing arrangement in 2020.…  ( 9 min )

Owner SoftBank pursues valuation higher for the chip designer than Nvidia's initial offer Goldman Sachs is reportedly lined up to be the lead underwriter for Arm's public offering in a move expected to value the chip designer at up to $60bn, higher than the purchase price first offered by Nvidia.…  ( 8 min )

Digital Markets Act rules agreed, set to include fines of up to 10% of turnover and power to break up businesses Sanctions for non-compliance with new EU powers could hit tech giants with fines of up to 10 percent of their worldwide turnover – that's around $21.bn in the case of dominant online retailer Amazon.…  ( 10 min )

You can now read your comics in the metaverse Something for the Weekend?  Here lie the bones of Good Ideas: child of impressionable managers, twin of floundering projects, much-beloved parent to scope creep. We will miss you. Not.…  ( 11 min )

SMEs' software spending subsidy continues As the UK's Chancellor of the Exchequer struggles to bring cheer to the nation's greatest cost of living crisis in 50 years, he let slip a few nuggets for the tech industry.…  ( 8 min )

Robo-worker manipulates test tubes and pipettes, images skin cells to classify disease A robotic system armed with AI-powered cameras can grow and image skin cells from test tubes to diagnose Parkinson's disease with minimal human help, according to researchers from Google and the New York Stem Cell Foundation.…  ( 9 min )

Looks like a job for ... Spotting the Obvious man! (I see you baby, shaking that mouse) On Call  You know that plumber who charges hundreds to just to change a magic washer? The IT world can be the same, where seemingly magical skills are grounded in the most mundane of realities. Welcome to Contractor Time in On Call.…  ( 9 min )

BigScience is a collaborative effort by developers volunteering to make ML research more accessible GTC  BigScience – a team made up of roughly a thousand developers around the world – has started training its 176-billion-parameter open-source AI language model in a bid to advance research into natural language processing (NLP).…  ( 8 min )

Poisoned SCADA apps could have disrupted power supply – perhaps even at nuclear plants The United States Department of Justice has unsealed a pair of indictments that detail alleged Russian government hackers' efforts to use supply chain attacks and malware in an attempt to compromise and control critical infrastructure around the world – including at least one nuclear power plant.…  ( 9 min )

Did lessons learned from South Korea make it all less scary? Google has revealed a shift of policy that means it is inclined to allow third-party party payment systems access to its Play Store.…  ( 8 min )

Security software vendor saddened but says its channel is holding firm Australian technology distributor Dicker Data has decided to end its commercial relationship with Russian security software vendor Kaspersky.…  ( 8 min )

Never mind those flashy GPUs, MCU drought hits health to automotive The global semiconductor shortage has engineers scrambling to acquire replacement parts, cancelling projects, or redesigning hardware from scratch, distributor Avnet revealed this month.…  ( 8 min )

Fake Oracle and Disney job ads to lure victims is certainly an interesting choice Google on Thursday described how it apparently caught and thwarted North Korea's efforts to exploit a remote code execution vulnerability in Chrome.…  ( 8 min )

COVID saw sales surge, but there's less reason to buy in the new normal The APAC region's market for traditional PCs - desktops notebooks and workstations - grew 15.9 per cent year-on-year in 2021 to 120.3 million units, but shipments appear to have peaked according to analyst firm IDC.…  ( 8 min )

Another day, another attack on the software supply chain A group of more than 200 malicious npm packages targeting developers who use Microsoft Azure has been removed two days after they were made available to the public.…  ( 9 min )

And machine learning that flags your CEO as suspicious GTC  Weaponized AI that goes beyond Zelenskyy deepfakes and is keeping some security researchers and data scientists up at night.…  ( 10 min )

Bitcoin millionaire teen said to be among those detained British cops investigating a cyber-crime group have made a string of arrests.…  ( 9 min )

Auf der britischen Fachmesse BETT zeigen Medion und jp.ik ihr Konzept für ein Notebook mit Raspberry Pi Compute Module CM4 - wohl als Versuchsballon.  ( 4 min )

Dass Apples M1-Prozessoren schnell sind, ist bekannt. Aber sind sie in der Praxis wirklich schneller und effizienter als Windows-Workstations?  ( 9 min )

Unser werktäglicher News-Überblick fasst die wichtigsten Nachrichten des Tages kurz und knapp zusammen.  ( 4 min )

Der NUC-Konkurrent Brix Extreme erscheint mit Intels "Alder Lake"-Prozessoren und soll besonders leise arbeiten.  ( 3 min )

Epic habe keine Beweise für Apples angebliche Monopolmacht erbringen können, so der iPhone-Hersteller. Das Urteil müsse in zweiter Instanz bestätigt werden.  ( 4 min )

Unsere Übersicht kleiner, aber interessanter Meldungen enthält diese Woche unter anderem GitHub, Node.js, VS Code und glückliche Entwickler.  ( 4 min )

Um in ihre Rechner einzubrechen, haben nordkoreanische Angreifer Opfer auf fingierte Webseiten gelockt, die eine Sicherheitslücke in Google Chrome missbrauchen.  ( 5 min )

Arbeitgeber suchen derzeit vor allem nach Go-Programmierern. Security-Expertinnen und -Experten sind ebenfalls sehr gefragt und erzielen die höchsten Einkommen.  ( 4 min )

Deutsch-österreichische Forschungsteams zeigen, dass bei den Taktfrequenzen optoelektronischer Schaltelemente noch viel Luft nach oben ist.  ( 4 min )

AWS und Microsoft Azure haben fast gleichzeitig neue Angebote für Spieleentwicklung in der Cloud auf den Markt gebracht, Azure sogar eine Virtuelle Maschine.  ( 5 min )

Es taucht immer mehr Malware auf, die das Windows Subsytem for Linux (WSL) als Einfallstor nutzen. Die Gefahr steigt, warnen Sicherheitsforscher.  ( 4 min )

Die dritte Auflage der Fachkonferenz und IT-Job-Messe findet parallel zur secIT in Hannover statt. Es präsentieren sich mehr als zehn attraktive Unternehmen.  ( 3 min )

Der ganze Tag voller Videoanrufe, endlose Diskussionen – die meisten Teilnehmer lassen Meetings nur noch über sich ergehen. Doch das muss nicht sein.  ( 6 min )

Die halbtägige Online-Veranstaltung am 26. April beschäftigt sich mit den Schwachstellen in der Softwarelieferkette und Maßnahmen, um sie abzusichern.  ( 3 min )

Es gibt ein wichtiges Sicherheitsupdate für verschiedene NAS-Modelle von Western Digital.  ( 3 min )

Apple plant mehr Auswahl bei seinem Einsteiger-Notebook. Davon geht ein bekannter Display-Analyst aus. Allerdings brauchen Kunden noch Geduld.  ( 4 min )

Das Hacker-Kollektiv Anonymous gibt an, Daten bei Nestlé kopiert und veröffentlicht zu haben. Nestlé widerspricht: Das sei man selbst gewesen.  ( 3 min )

Am Donnerstag kam es zeitweise zu einem merkwürdigen Fehlerbild bei iMessage: Textversand ging, Bilder nicht. Betroffen waren zudem Fotos und der Schlüsselbund.  ( 4 min )

Am 18. Mai lernen Admins, wie sie SharePoint Online einrichten und welche Regeln und Best Practices sie für einen erfolgreichen Einsatz kennen müssen.  ( 4 min )

Tausende Rechner aus dem Energiesektor in über hundert Ländern hätten die russisch-staatlichen Einbrecher kompromittiert. Nun erhebt die US-Justiz Anklage.  ( 4 min )

Manch kleines und mittelständisches Unternehmen in Mecklenburg-Vorpommern tut sich schwer mit der Digitalisierung, auch Budgets würden zu knapp kalkuliert.  ( 3 min )

Um den Leistungshunger kommender Pixelbeschleuniger zu befriedigen, dürfen zukünftige PC-Netzteile kurzzeitig bis zum Doppelten der Nennleistung schlucken.  ( 5 min )

This is today’s edition of The Download, our weekday newsletter that provides a daily dose of what’s going on in the world of technology. We spoke to a radiation expert in Kyiv about the current nuclear accident risk Russian troops have been bringing death and destruction to Ukraine since they invaded on February 24. But there’s a…  ( 4 min )

Russian troops have been bringing death and destruction to Ukraine since they invaded on February 24. But there’s a risk they could cause a nuclear accident too, according to Vadim Chumak, head of the external exposure dosimetry lab at Ukraine’s National Research Center for Radiation Medicine in the country’s capital, Kyiv. Russia has taken control…  ( 8 min )

In the past months, there have been lots of talks dedictaed to Remix. Routing is not only one of the things that sets it apart from other frameworks, but it also fuels great performance and improves the overall experience for developers. Let’s dig in to all of the features that build up routing in this powerful framework.  ( 10 min )

The U.S. government on Thursday released a cybersecurity advisory outlining multiple intrusion campaigns conducted by state-sponsored Russian cyber actors from 2011 to 2018 that targeted the energy sector in the U.S. and beyond. "The [Federal Security Service] conducted a multi-stage campaign in which they gained remote access to U.S. and international Energy Sector networks, deployed  ( 3 min )

The City of London Police has arrested seven teenagers between the ages of 16 and 21 for their alleged connections to the prolific LAPSUS$ extortion gang that's linked to a recent burst of attacks targeting NVIDIA, Samsung, Ubisoft, LG, Microsoft, and Okta. The development, which was first disclosed by BBC News, comes after a report from Bloomberg revealed that a 16-year-old Oxford-based  ( 3 min )

Researchers have blown the lid off a sophisticated malicious scheme primarily targeting Chinese users via copycat apps on Android and iOS that mimic legitimate digital wallet services to siphon cryptocurrency funds. "These malicious apps were able to steal victims' secret seed phrases by impersonating Coinbase, imToken, MetaMask, Trust Wallet, Bitpie, TokenPocket, or OneKey," said Lukáš Štefanko  ( 4 min )

Google's Threat Analysis Group (TAG) on Thursday disclosed that it acted to mitigate threats from two distinct government-backed attacker groups based in North Korea that exploited a recently-uncovered remote code execution flaw in the Chrome web browser. The campaigns, once again "reflective of the regime's immediate concerns and priorities," are said to have targeted U.S. based organizations  ( 4 min )

Es gibt ein wichtiges Sicherheitsupdate für verschiedene NAS-Modelle von Western Digital.  ( 3 min )

The U.S. has indicted four Russian government employees for their involvement in hacking campaigns targeting hundreds of companies and organizations from the global energy sector between 2012 and 2018. [...]  ( 4 min )

Western Digital has released new My Cloud OS firmware to fix a vulnerability exploited by bug hunters during the Pwn2Own 2021 hacking competition to achieve remote code execution. [...]  ( 4 min )

As Lapsus$ data extortion gang announced that several of its members are taking a vacation, the City of London Police say they have arrested seven individuals connected to the gang. [...]  ( 4 min )

Researchers report a new version of the JSSLoader remote access trojan being distributed malicious Microsoft Excel addins. [...]  ( 4 min )

The independent communications authority of South Africa (ICASA) has submitted a radical proposal to tackle the problem of SIM swapping attacks in the country, suggesting that local service providers should keep biometric data of cellphone number owners. [...]  ( 5 min )

North Korean state hackers have exploited a zero-day, remote code execution vulnerability in Google Chrome web browser for more than a month before a patch became available, in attacks targeting news media, IT companies, cryptocurrency and fintech organizations. [...]  ( 4 min )

Microsoft has addressed a new known issue causing DNS stub zones loading failures that could lead to DNS resolution issues on Windows Server 2019 systems. [...]  ( 3 min )

GitHub says recent service outages were caused by resource contention issues in their primary database cluster. [...]  ( 4 min )

Recently, FortiGuard Labs released the latest Global Threat Landscape Report for the second half of 2021. There is a ton of data in it and several key takeaways. The main themes that weave through this report are about the increase in cybercriminal sophistication as well as speed. [...]  ( 7 min )

A Russian national has been indicted by the US DOJ and added to the FBI's Cyber Most Wanted list for allegedly creating and managing a cybercrime marketplace. [...]  ( 4 min )

Putting silicon in the cloud so you can design silicon in the cloud The continued march of chip design tools into the cloud has received another endorsement, this time from GlobalFoundries, the fourth largest chip manufacturer in the world.…  ( 8 min )

For all those worried about the Firefox maker, now you can chip in five or ten bucks a month The Mozilla Developer Network, which hosts free, open access to web standard documentation, tools, samples and other good stuff, is going pay-for-play with a premium subscription plan that adds new personalization features. …  ( 8 min )

Tesla, Porche, jewelry, bags, purses, watches, the whole works A now-former HP finance planning manager pleaded guilty on Wednesday to charges of wire fraud, money laundering, and filing false tax returns that follow from the misappropriation of company funds.…  ( 8 min )

Vitess-based database splits system for 30 minutes allowing users to right regrettable changes Distributed transaction database biz PlanetScale has introduced an "undo" button it says can reverse schema changes, allowing devs to avoid embarrassing disasters by reverting to the original design without losing data within a 30-minute window.…  ( 8 min )

French research giant, C12 see challenges, but prototype slated for 2024 Here's something we will only believe once we see it: A quantum computing chip the size of a large silicon wafer.…  ( 8 min )

China's Twitter analog is latest in SEC crosshairs over audits Weibo, the Chinese equivalent to Twitter, has been added to an SEC roll of companies that may be delisted due to inaccessible audits. Surprisingly, China seems to be taking DC's side.…  ( 7 min )